last executing test programs: 8m33.415571919s ago: executing program 1 (id=421): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f00000000c0)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000140)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000180)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80200, 0x0) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000400)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x14b102) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000580), 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000005c0), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f00000007c0)='bridge0\x00') socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000800)={0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x735d, &(0x7f0000000840)={0x0, 0x8eb4, 0x1000, 0x3, 0xa1, 0x0, r7}, 0x0, &(0x7f00000008c0), &(0x7f0000000900)) 8m30.162163194s ago: executing program 1 (id=426): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r1 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x608502) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./my_configfs/target/dbroot\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x800000000007, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="feffffff", @ANYRES16, @ANYBLOB="01032bbd7000fedbdf252b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r6, &(0x7f0000000780)=""/102392, 0x18ff8) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000019780)="5766dff3eacc03e400007a00", 0x10) shutdown(r7, 0x0) 8m27.901025643s ago: executing program 1 (id=430): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000940)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000001440)={0x2, 0x1bd, @loopback}, 0x10) listen(r4, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./cifs\x00', 0x0) mount(&(0x7f00000014c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000001500)='./cifs\x00', &(0x7f0000001540)='cifs\x00', 0x0, &(0x7f0000001580)='vers=1.0,user=root,pass=root\x00') setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000015c0)="890704b3771c16d355840f4e1489c2ce0596e0835d610400385cecb517a1a0c2b8c2c064bd3253e3ee7f28b562a24355f088e42ef567cadddbb9123f922de6a72cf8df0950b4f8a98f332bdbf8cea9628763708efd4f4da8758b8f226d184dff8b1544d4e7ba807ad5ef2754bc0c7e2e864965f60c981e52284e9be62e0e967ad68e732254637f82eeb8ca469a6b2678fa8dd73c4829472a6c514c86fdc7fcf0104d065f5f10413797a794439a4effb5f5eea130048c34", 0xb7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001680)='xfrm0\x00', 0x10) syz_open_dev$vim2m(&(0x7f00000016c0), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000001700)={0xf0f01f, 0x5}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000001740)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r5, &(0x7f0000001780)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64000101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) 8m23.632122649s ago: executing program 1 (id=434): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x10, 0x5, 0xe5, 0x7c, 0x0, 0x6, 0xe, 0x1, 0x3, 0xe, 0x8, 0x6, 0xfd, 0x7}, 0xe) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @dev}, 0x2, 0x3}}, 0x2e) getsockopt(r4, 0x111, 0x2, 0x0, &(0x7f0000000100)) sendmmsg$inet(r0, &(0x7f0000005a00)=[{{&(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001c00000000000000000000000800"], 0x38}}], 0x1, 0xc050) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socket$inet_icmp(0x2, 0x2, 0x1) 8m23.185973028s ago: executing program 1 (id=436): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e1", 0x11}], 0x2) setns(0xc9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) listns(&(0x7f0000000440)={0x20, 0x0, 0x3, 0x14020000, 0x0, 0x1}, &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000019540), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000019580)={0x1, 0x1, {0x39, 0x38, 0x29, 0xd, 0x6, 0x4eac, 0x10000005, 0xce}}) getegid() sched_setscheduler(0x0, 0x2, &(0x7f00000195c0)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019600)={0xffffffffffffffff}) mount(0x0, &(0x7f0000019640)='./tracing\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000019680)='1', 0x1) recvmmsg(r5, &(0x7f00000196c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000019700)='ramfs\x00', 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000019740)={0xa, 0x4e23, 0x6, @local, 0x400}, 0x1c) 8m22.269408822s ago: executing program 1 (id=437): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x0, 0x5002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000001100)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f000001a100)=0x7) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = msgget$private(0x0, 0x1c6) msgsnd(r6, &(0x7f000001a140)=ANY=[@ANYBLOB="eab446243c96c04247de08c918fdd89a2fee590cc8daf385c0f2a41cb14672ad60bad3b54bf25181"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x7, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000340)={0xfffffffc, 0x40002, 0x2, {0xd, @sliced={0x8, [0xec10, 0x239f, 0x40, 0x8, 0x827, 0x0, 0x7, 0x22, 0x4, 0x6, 0x6, 0x28fa, 0x106, 0x2, 0x101, 0xe3b0, 0x10, 0xd6c5, 0x9, 0xdfee, 0xd, 0x0, 0xf667, 0x10, 0x6, 0x5, 0x44, 0x78, 0x954, 0x9, 0x7, 0x6, 0x4, 0xfc00, 0x7, 0xb4a1, 0x1, 0x9, 0x4, 0xffff, 0x80, 0x9e, 0x5, 0xf, 0x6, 0x8658, 0x15, 0x5], 0x5}}, 0x3}) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500001cddffffffff109078ac4e2000089078ebdeed87936bf2e5868a58980c18c21d79bdc18afb142ef006ddbece0478523b3fb297923c4e9d07b3d838e86f96fdf745a40ae4aab0a6053c65ae9fdc8c26a6d9fe6ab1f8f159c403198bcbe3bc747fddf542d2434bb9efa2319bc6db29ef529e2194e2231c0453f31365fb9873c4696b26ba57ddf7f881da1519a6933c1c981f7d873afcca7e35f64e8bfe1bf1e7368c6d196878add8ab7bb907527dfffa811a841aaaac40a9a9c8116d4ed8bdf2c893c5d11237951bdf3c02a9c04abe195ac1006555a3195ce895629689"], 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e24, @multicast2}, 0x10) 8m6.153414319s ago: executing program 32 (id=437): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x0, 0x5002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000001100)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f000001a100)=0x7) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = msgget$private(0x0, 0x1c6) msgsnd(r6, &(0x7f000001a140)=ANY=[@ANYBLOB="eab446243c96c04247de08c918fdd89a2fee590cc8daf385c0f2a41cb14672ad60bad3b54bf25181"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x7, 0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000340)={0xfffffffc, 0x40002, 0x2, {0xd, @sliced={0x8, [0xec10, 0x239f, 0x40, 0x8, 0x827, 0x0, 0x7, 0x22, 0x4, 0x6, 0x6, 0x28fa, 0x106, 0x2, 0x101, 0xe3b0, 0x10, 0xd6c5, 0x9, 0xdfee, 0xd, 0x0, 0xf667, 0x10, 0x6, 0x5, 0x44, 0x78, 0x954, 0x9, 0x7, 0x6, 0x4, 0xfc00, 0x7, 0xb4a1, 0x1, 0x9, 0x4, 0xffff, 0x80, 0x9e, 0x5, 0xf, 0x6, 0x8658, 0x15, 0x5], 0x5}}, 0x3}) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500001cddffffffff109078ac4e2000089078ebdeed87936bf2e5868a58980c18c21d79bdc18afb142ef006ddbece0478523b3fb297923c4e9d07b3d838e86f96fdf745a40ae4aab0a6053c65ae9fdc8c26a6d9fe6ab1f8f159c403198bcbe3bc747fddf542d2434bb9efa2319bc6db29ef529e2194e2231c0453f31365fb9873c4696b26ba57ddf7f881da1519a6933c1c981f7d873afcca7e35f64e8bfe1bf1e7368c6d196878add8ab7bb907527dfffa811a841aaaac40a9a9c8116d4ed8bdf2c893c5d11237951bdf3c02a9c04abe195ac1006555a3195ce895629689"], 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e24, @multicast2}, 0x10) 5m3.933324085s ago: executing program 5 (id=720): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0x8, &(0x7f00000000c0)={0x8, 0x84}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee8, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x18f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x200000b, 0x10, 0xffffffffffffffff, 0x4000) r3 = fsmount(0xffffffffffffffff, 0x1, 0x0) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x100000000000011, 0x1, 0x2f91) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000380)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000340)) 5m2.42163908s ago: executing program 5 (id=723): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') 5m1.553032252s ago: executing program 5 (id=726): prlimit64(0x0, 0xe, &(0x7f0000001780)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000017c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001800)=0x7) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x1e5}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r5 = io_uring_setup(0x366, &(0x7f0000000140)={0x0, 0xd9fd, 0x1, 0x3, 0x3c6, 0x0, r1}) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x8, 0x2, 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000001900)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000001980), 0x651, 0x0) recvmmsg(r6, &(0x7f00000019c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002040), 0x4000000004882, 0x0) io_setup(0x8, &(0x7f0000002080)=0x0) io_submit(r9, 0xca, &(0x7f00000020c0)=[&(0x7f0000002100)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r8, &(0x7f0000002140)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 4m59.222878386s ago: executing program 5 (id=730): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143102) writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000400)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m57.258280485s ago: executing program 5 (id=733): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000001100)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001a100)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = msgget$private(0x0, 0x1c6) msgsnd(r4, &(0x7f000001a140)=ANY=[@ANYBLOB="eab446243c96c04247de08c918fdd89a2fee590cc8daf385c0f2a41cb14672ad60bad3b54bf25181"], 0x8, 0x0) 4m55.929916685s ago: executing program 5 (id=735): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x0, 0x5002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000001100)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = msgget$private(0x0, 0x1c6) msgsnd(r6, &(0x7f000001a140)=ANY=[@ANYBLOB="eab446243c96c04247de08c918fdd89a2fee590cc8daf385c0f2a41cb14672ad60bad3b54bf25181"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x7, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000340)={0xfffffffc, 0x40002, 0x2, {0xd, @sliced={0x8, [0xec10, 0x239f, 0x40, 0x8, 0x827, 0x0, 0x7, 0x22, 0x4, 0x6, 0x6, 0x28fa, 0x106, 0x2, 0x101, 0xe3b0, 0x10, 0xd6c5, 0x9, 0xdfee, 0xd, 0x0, 0xf667, 0x10, 0x6, 0x5, 0x44, 0x78, 0x954, 0x9, 0x7, 0x6, 0x4, 0xfc00, 0x7, 0xb4a1, 0x1, 0x9, 0x4, 0xffff, 0x80, 0x9e, 0x5, 0xf, 0x6, 0x8658, 0x15, 0x5], 0x5}}, 0x3}) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500001cddffffffff109078ac4e2000089078ebdeed87936bf2e5868a58980c18c21d79bdc18afb142ef006ddbece0478523b3fb297923c4e9d07b3d838e86f96fdf745a40ae4aab0a6053c65ae9fdc8c26a6d9fe6ab1f8f159c403198bcbe3bc747fddf542d2434bb9efa2319bc6db29ef529e2194e2231c0453f31365fb9873c4696b26ba57ddf7f881da1519a6933c1c981f7d873afcca7e35f64e8bfe1bf1e7368c6d196878add8ab7bb907527dfffa811a841aaaac40a9a9c8116d4ed8bdf2c893c5d11237951bdf3c02a9c04abe195ac1006555a3195ce895629689"], 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e24, @multicast2}, 0x10) 4m39.58091082s ago: executing program 33 (id=735): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x0, 0x5002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000001100)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = msgget$private(0x0, 0x1c6) msgsnd(r6, &(0x7f000001a140)=ANY=[@ANYBLOB="eab446243c96c04247de08c918fdd89a2fee590cc8daf385c0f2a41cb14672ad60bad3b54bf25181"], 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x7, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000340)={0xfffffffc, 0x40002, 0x2, {0xd, @sliced={0x8, [0xec10, 0x239f, 0x40, 0x8, 0x827, 0x0, 0x7, 0x22, 0x4, 0x6, 0x6, 0x28fa, 0x106, 0x2, 0x101, 0xe3b0, 0x10, 0xd6c5, 0x9, 0xdfee, 0xd, 0x0, 0xf667, 0x10, 0x6, 0x5, 0x44, 0x78, 0x954, 0x9, 0x7, 0x6, 0x4, 0xfc00, 0x7, 0xb4a1, 0x1, 0x9, 0x4, 0xffff, 0x80, 0x9e, 0x5, 0xf, 0x6, 0x8658, 0x15, 0x5], 0x5}}, 0x3}) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500001cddffffffff109078ac4e2000089078ebdeed87936bf2e5868a58980c18c21d79bdc18afb142ef006ddbece0478523b3fb297923c4e9d07b3d838e86f96fdf745a40ae4aab0a6053c65ae9fdc8c26a6d9fe6ab1f8f159c403198bcbe3bc747fddf542d2434bb9efa2319bc6db29ef529e2194e2231c0453f31365fb9873c4696b26ba57ddf7f881da1519a6933c1c981f7d873afcca7e35f64e8bfe1bf1e7368c6d196878add8ab7bb907527dfffa811a841aaaac40a9a9c8116d4ed8bdf2c893c5d11237951bdf3c02a9c04abe195ac1006555a3195ce895629689"], 0x0) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e24, @multicast2}, 0x10) 1m48.721181743s ago: executing program 4 (id=1162): setreuid(0xee01, 0xffffffffffffffff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 1m48.550619s ago: executing program 4 (id=1164): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 1m48.316334546s ago: executing program 4 (id=1167): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 1m47.730984202s ago: executing program 4 (id=1172): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002300), 0x28000, 0x0) ioctl$DM_DEV_ARM_POLL(r0, 0xc138fd10, &(0x7f0000002340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80011, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) 1m47.527972697s ago: executing program 4 (id=1173): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x85}, 0xc) syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', 0x2, 0x17b) r1 = syz_clone(0x21888200, 0x0, 0xfffffffffffffc9e, 0x0, 0x0, 0x0) rt_sigqueueinfo(r1, 0x9, &(0x7f0000000480)={0x0, 0x0, 0xffffffc0}) write$cgroup_pid(r0, &(0x7f0000000240)=r1, 0x12) 1m46.856083891s ago: executing program 4 (id=1176): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = fsopen(&(0x7f0000000540)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x14c98, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m31.558777991s ago: executing program 34 (id=1176): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = fsopen(&(0x7f0000000540)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x14c98, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m1.12093197s ago: executing program 0 (id=1352): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000001740)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000001780)='./file1\x00', 0x400, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001840)=""/23, 0x17, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m0.875789409s ago: executing program 0 (id=1353): unshare(0x60000600) r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xc0000) 59.27501368s ago: executing program 0 (id=1357): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 59.069944234s ago: executing program 0 (id=1359): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000169000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00005db000/0x3000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) syz_open_dev$MSR(0x0, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019500)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000019540)='./my_configfs\x00', &(0x7f0000019580)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000195c0)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019600)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000019680)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0xbf) mkdirat(0xffffffffffffff9c, &(0x7f00000196c0)='streaming/header/h\x00', 0x157) symlink(&(0x7f0000019740)='streaming/header/h\x00', &(0x7f0000019780)='streaming/header/h/u\x00') 58.664026691s ago: executing program 0 (id=1362): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000ff8)=@ethtool_sfeatures={0x3b, 0x2, [{0x10009, 0x3}, {0x8000006, 0x6}]}}) 58.376067435s ago: executing program 0 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x80000000000000) mkdir(&(0x7f00000001c0)='dir0\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='dir0\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) ptrace(0x10, 0x0) mount$9p_fd(0x0, &(0x7f0000000c80)='dir0/per_cpu/cpu0/trace_pipe\x00', &(0x7f0000000cc0), 0x8000, &(0x7f0000000e40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 43.222531185s ago: executing program 35 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x80000000000000) mkdir(&(0x7f00000001c0)='dir0\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='dir0\x00', &(0x7f0000000540)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) ptrace(0x10, 0x0) mount$9p_fd(0x0, &(0x7f0000000c80)='dir0/per_cpu/cpu0/trace_pipe\x00', &(0x7f0000000cc0), 0x8000, &(0x7f0000000e40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 17.042590651s ago: executing program 3 (id=1509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 15.549041858s ago: executing program 3 (id=1513): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000c00)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./dev/sda\x00', 0x4d802, 0x0) read$FUSE(r0, &(0x7f0000000c80)={0x2020}, 0x10000002e) 15.48403687s ago: executing program 6 (id=1514): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000580)=ANY=[], 0xdc) 13.554836543s ago: executing program 7 (id=1515): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000100b80)='asymmetric\x00', 0x0, &(0x7f0000100bc0)="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", 0x559, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000101140)={r0, 0x31}, 0x0, &(0x7f0000101180)="c53b44533c0be378ded50c85d498a31c67d6cfa7a87fb5b191fee60810c46b1c7acf8271de167d69ea6626aa42817e9420", 0x0) 12.14589924s ago: executing program 3 (id=1518): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.014215343s ago: executing program 7 (id=1519): add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.954266544s ago: executing program 8 (id=1520): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 8.751820008s ago: executing program 7 (id=1521): r0 = fsopen(&(0x7f0000000180)='vfat\x00', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() getrlimit(0x0, &(0x7f00000004c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) tgkill(r1, r1, 0x2d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000004c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r2, &(0x7f0000000540), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000600)={0x0, 'erspan0\x00', {0x1}, 0x26}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000640)={'bridge0\x00', &(0x7f0000000680)=@ethtool_wolinfo={0x6, 0x0, 0xd}}) getrusage(0x0, &(0x7f00000006c0)) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000001c0)='smackfsdef', &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000055000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x206302, 0x0) sendmsg$AUDIT_SET(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x3e9, 0x8, 0x70bd2b, 0x25dfdbfc, {0x41, 0x0, 0x2, 0xffffffffffffffff, 0x7, 0x6, 0x4, 0x11e, 0x0, 0x8, 0x5}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4880}, 0x8000) 8.751512551s ago: executing program 8 (id=1522): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/lru_gen\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000440)=0x201, 0x4) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000600)=""/9, &(0x7f0000000640)=0x9) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) 8.559277379s ago: executing program 2 (id=1523): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000180)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r0 = getpid() syz_open_procfs(0x0, &(0x7f0000001880)='net/route\x00') syz_pidfd_open(r0, 0x0) capget(&(0x7f0000001800)={0x19980330, r0}, &(0x7f0000001840)={0x1, 0x0, 0x9, 0x10001, 0xc9}) bpf$PROG_LOAD(0x5, &(0x7f000001a940)={0x1, 0x14, &(0x7f000001ac40)=ANY=[], &(0x7f000001aac0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000780)=""/4096, 0x1000, 0x10180, &(0x7f0000001780)=@rc={0x1f, @none, 0x8}, 0x80) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 8.4757419s ago: executing program 3 (id=1524): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x103) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000006240)="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", 0x2000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000008440)='./file0\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 7.282458653s ago: executing program 6 (id=1525): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x4000087, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x700, 0x8000, 0xfffff801, 0x6, {{0x9, 0x4, 0x2, 0x7, 0x24, 0x66, 0x0, 0x0, 0x0, 0x0, @multicast2, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xa, 0x0, 0x3, [0x8, 0x7]}]}}}}}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x143a42, 0xc0) socket(0x2, 0x3, 0xff) pwritev(r5, &(0x7f0000000440)=[{&(0x7f0000000480)='d', 0x1}], 0x1e, 0xbdee, 0x1000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/285], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', r4}, 0x94) 6.070001s ago: executing program 7 (id=1526): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000580)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 6.027697436s ago: executing program 2 (id=1527): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="0500000040000000ff", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRESDEC=r0], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 5.891606848s ago: executing program 8 (id=1528): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) openat$ptmx(0xffffffffffffff9c, 0x0, 0xe0400, 0x0) r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000540)=0x1b) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r5, 0x4, 0x1}, 0x50) r6 = fsopen(&(0x7f0000000880)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000008c0)='rootcontext', &(0x7f0000000900)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000440)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000500)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4263, 0x80000, 0x2, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x1, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 4.239558306s ago: executing program 2 (id=1533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) close(0x3) 1.700065837s ago: executing program 8 (id=1534): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x480, 0x4) 1.602606151s ago: executing program 7 (id=1535): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='loginuid\x00') pwritev(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)='0', 0x1}], 0x1, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x2, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x1, 0x2, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}]}}}}}, 0x0) 1.540240689s ago: executing program 3 (id=1536): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x31, 0x0, 0x0) syz_usb_connect$midi(0x4, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x2f, &(0x7f0000000480)={0x5, 0xf, 0x2f, 0x1, [@generic={0x2a, 0x10, 0x3, "3301593ee916a34d54afc0b52fd3a0fea7c9f00479ec21e6cf70247e4a3909d6a5ab2594b53c2e"}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.443647842s ago: executing program 6 (id=1537): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) 1.400150408s ago: executing program 8 (id=1538): pipe(&(0x7f0000000100)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000380)=r2) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) write(r0, &(0x7f0000000040)="338b369400000000000000", 0xb) r5 = socket$inet6(0xa, 0x1, 0x0) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='1', 0x1) 1.399932505s ago: executing program 2 (id=1539): creat(0x0, 0xecf86c37d53049f2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='0', 0x1) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() 1.16777492s ago: executing program 6 (id=1540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x18, 0x0, 0x0) 162.853167ms ago: executing program 7 (id=1541): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) gettid() rt_sigtimedwait(&(0x7f0000000140)={[0xffffffff]}, 0x0, 0x0, 0x8) 58.72416ms ago: executing program 8 (id=1542): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x81, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x37, 0x4, 0xc}}}}}]}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) close(r0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 6 (id=1543): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="c1010000000000407f04ffff00000000000109022d0001000000000904000002030000000921000000012218"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022190000005716bd45051500160000b09101090193"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000100)={0x1, 0x100}) kernel console output (not intermixed with test programs): 0000 R09: 0000000000000000 [ 669.176756][T10354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.176763][T10354] R13: 00007fe152a26038 R14: 00007fe152a25fa0 R15: 00007ffd2d9c26b8 [ 669.176779][T10354] [ 669.411107][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 669.541187][ T10] usb 4-1: device descriptor read/64, error -71 [ 669.651628][ T10] usb usb4-port1: attempt power cycle [ 669.652151][ T2267] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 669.682119][T10359] netlink: 4116 bytes leftover after parsing attributes in process `syz.0.935'. [ 669.804466][ T2267] usb 7-1: unable to get BOS descriptor or descriptor too short [ 669.804498][ T2267] usb 7-1: New USB device found: idVendor=04b4, idProduct=931f, bcdDevice=0.40 [ 669.824826][ T2267] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 669.824853][ T2267] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 669.854126][ T2267] usb 7-1: string descriptor 0 read error: -22 [ 669.854199][ T2267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.895948][ T2267] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 669.991131][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 670.563509][ T10] usb 4-1: device descriptor read/8, error -71 [ 671.372859][ T2267] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 671.386570][ T2267] snd-usb-hiface 7-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 671.532701][T10365] macvtap1: entered promiscuous mode [ 671.532950][T10365] vlan0: entered promiscuous mode [ 671.534077][T10365] team0: Device macvtap1 failed to register rx_handler [ 671.556640][T10365] vlan0: left promiscuous mode [ 671.615199][ T2267] usb 7-1: can't set first interface for hiFace device. [ 671.615223][ T2267] snd-usb-hiface 7-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 671.645723][ T2267] usb 7-1: can't set first interface for hiFace device. [ 671.645744][ T2267] snd-usb-hiface 7-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 671.648534][ T30] audit: type=1400 audit(1793612711.214:444): avc: denied { map } for pid=10369 comm="syz.3.937" path="socket:[24622]" dev="sockfs" ino=24622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 671.648571][ T30] audit: type=1400 audit(1793612711.214:445): avc: denied { read } for pid=10369 comm="syz.3.937" path="socket:[24622]" dev="sockfs" ino=24622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 671.725817][ T2267] usb 7-1: USB disconnect, device number 7 [ 672.120519][ T30] audit: type=1400 audit(1793612711.684:446): avc: denied { write } for pid=10360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 673.860411][T10383] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 673.861480][T10383] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 674.789324][T10391] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 674.869241][ T30] audit: type=1400 audit(1793612714.434:447): avc: denied { write } for pid=10389 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.971704][ T2267] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 675.124273][ T2267] usb 7-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 675.136058][ T2267] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.136081][ T2267] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.136105][ T2267] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.171827][ T2267] usb 7-1: config 0 descriptor?? [ 675.231402][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 675.386241][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 675.386273][ T10] usb 5-1: New USB device found: idVendor=04b4, idProduct=931f, bcdDevice=0.40 [ 675.387330][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 675.387368][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 675.444023][ T10] usb 5-1: string descriptor 0 read error: -22 [ 675.444113][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.493277][ T30] audit: type=1400 audit(1793612715.054:448): avc: denied { write } for pid=10401 comm="syz.0.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 675.493483][ T10] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 675.648256][ T2267] savu 0003:1E7D:2D5A.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 675.736892][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 675.752023][ T10] snd-usb-hiface 5-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 675.792608][T10388] FAULT_INJECTION: forcing a failure. [ 675.792608][T10388] name failslab, interval 1, probability 5, space 0, times 9995 [ 675.792631][T10388] CPU: 0 UID: 0 PID: 10388 Comm: syz.6.941 Not tainted syzkaller #0 PREEMPT(full) [ 675.792645][T10388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 675.792653][T10388] Call Trace: [ 675.792657][T10388] [ 675.792662][T10388] dump_stack_lvl+0x100/0x190 [ 675.792689][T10388] should_fail_ex.cold+0x5/0xa [ 675.792709][T10388] should_failslab+0xc2/0x120 [ 675.792723][T10388] kmem_cache_alloc_noprof+0x92/0x6a0 [ 675.792742][T10388] ? do_getname+0x35/0x390 [ 675.792761][T10388] do_getname+0x35/0x390 [ 675.792779][T10388] do_sys_openat2+0xc3/0x1d0 [ 675.792803][T10388] ? __pfx_do_sys_openat2+0x10/0x10 [ 675.792819][T10388] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 675.792834][T10388] ? __fget_files+0x21f/0x3d0 [ 675.792852][T10388] __x64_sys_openat+0x12d/0x210 [ 675.792867][T10388] ? __pfx___x64_sys_openat+0x10/0x10 [ 675.792882][T10388] ? ksys_write+0x1ac/0x250 [ 675.792899][T10388] do_syscall_64+0x123/0x790 [ 675.792914][T10388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.792927][T10388] RIP: 0033:0x7f72eb39f559 [ 675.792937][T10388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.792950][T10388] RSP: 002b:00007f72ec200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 675.792962][T10388] RAX: ffffffffffffffda RBX: 00007f72eb625fa0 RCX: 00007f72eb39f559 [ 675.792969][T10388] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 675.792977][T10388] RBP: 00007f72ec200090 R08: 0000000000000000 R09: 0000000000000000 [ 675.792984][T10388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.792990][T10388] R13: 00007f72eb626038 R14: 00007f72eb625fa0 R15: 00007ffc4c3446b8 [ 675.793007][T10388] [ 675.958623][ T10] usb 5-1: can't set first interface for hiFace device. [ 675.958645][ T10] snd-usb-hiface 5-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 676.066769][ T10] usb 5-1: can't set first interface for hiFace device. [ 676.066800][ T10] snd-usb-hiface 5-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 676.108190][ T10] usb 5-1: USB disconnect, device number 13 [ 676.263360][ T2267] usb 7-1: USB disconnect, device number 8 [ 676.285720][T10405] fido_id[10405]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:1E7D:2D5A.0002/report_descriptor': No such device [ 676.567886][T10412] netlink: 'syz.2.943': attribute type 3 has an invalid length. [ 676.872579][T10427] Unsupported ieee802154 address type: 0 [ 676.872618][ T30] audit: type=1400 audit(1793612716.444:449): avc: denied { bind } for pid=10425 comm="syz.2.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 677.060287][ T30] audit: type=1400 audit(1793612716.624:450): avc: denied { create } for pid=10434 comm="syz.2.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 677.098623][ T30] audit: type=1400 audit(1793612716.664:451): avc: denied { write } for pid=10434 comm="syz.2.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 677.267525][T10444] kernel profiling enabled (shift: 3) [ 677.508965][ T30] audit: type=1400 audit(1793612717.074:452): avc: denied { create } for pid=10429 comm="syz.6.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 678.062714][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 678.108268][ T30] audit: type=1400 audit(1793612717.674:453): avc: denied { relabelfrom } for pid=10468 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 678.138989][ T30] audit: type=1400 audit(1793612717.704:454): avc: denied { relabelto } for pid=10468 comm="syz.3.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 678.211333][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 678.218537][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 678.218573][ T10] usb 1-1: New USB device found: idVendor=2a39, idProduct=3fd4, bcdDevice=0.40 [ 678.220926][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 678.266920][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.266941][ T10] usb 1-1: Product: syz [ 678.266951][ T10] usb 1-1: Manufacturer: syz [ 678.266959][ T10] usb 1-1: SerialNumber: syz [ 678.411466][T10474] netlink: 44 bytes leftover after parsing attributes in process `syz.3.971'. [ 678.411486][T10474] netlink: 51 bytes leftover after parsing attributes in process `syz.3.971'. [ 678.411496][T10474] netlink: 51 bytes leftover after parsing attributes in process `syz.3.971'. [ 678.499039][ T30] audit: type=1400 audit(1793612718.064:455): avc: denied { ioctl } for pid=10477 comm="syz.6.973" path="/dev/ptyr1" dev="devtmpfs" ino=136 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 678.704811][ T10] usb 1-1: USB disconnect, device number 15 [ 678.795035][ T9951] udevd[9951]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 678.819017][ T985] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 678.902085][T10487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 678.968659][ T985] usb 7-1: New USB device found: idVendor=1235, idProduct=8002, bcdDevice=0.40 [ 678.969467][ T985] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 678.992451][ T985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.992473][ T985] usb 7-1: Product: syz [ 678.992482][ T985] usb 7-1: Manufacturer: syz [ 678.992493][ T985] usb 7-1: SerialNumber: syz [ 679.189928][T10492] netlink: 'syz.4.975': attribute type 93 has an invalid length. [ 679.249015][ T985] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 679.268536][ T985] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 679.392435][T10496] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 679.395947][ T985] usb 7-1: USB disconnect, device number 9 [ 679.473233][ T30] audit: type=1400 audit(1793612720.042:456): avc: denied { listen } for pid=10497 comm="syz.2.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 679.506287][ T9951] udevd[9951]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.716132][ T30] audit: type=1400 audit(1793612720.282:457): avc: denied { append } for pid=10506 comm="syz.0.987" name="uprobe_events" dev="tracefs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 679.901073][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 680.051581][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 680.052376][ T10] usb 3-1: New USB device found: idVendor=0644, idProduct=800e, bcdDevice=0.40 [ 680.054556][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.054591][ T10] usb 3-1: Product: syz [ 680.054601][ T10] usb 3-1: Manufacturer: syz [ 680.054610][ T10] usb 3-1: SerialNumber: syz [ 680.269657][T10502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.269941][T10502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.310014][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.406787][ T10] usb 3-1: USB disconnect, device number 19 [ 682.960463][T10508] event trace: Could not enable event p [ 683.137830][T10318] udevd[10318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 683.184117][ T30] audit: type=1400 audit(1793612723.752:458): avc: denied { write } for pid=10535 comm="syz.6.998" name="sda" dev="devtmpfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 683.346333][ T5860] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 683.532887][ T5860] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 683.532917][ T5860] usb 5-1: no configurations [ 683.532925][ T5860] usb 5-1: can't read configurations, error -22 [ 683.662123][ T5860] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 683.801851][ T2267] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 683.817696][ T5860] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 683.817725][ T5860] usb 5-1: no configurations [ 683.817734][ T5860] usb 5-1: can't read configurations, error -22 [ 683.817866][ T5860] usb usb5-port1: attempt power cycle [ 683.954615][ T2267] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 683.956138][ T2267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.956166][ T2267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.956180][ T2267] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 683.956206][ T2267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.998954][ T2267] usb 3-1: config 0 descriptor?? [ 684.151214][ T5860] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 684.172965][ T5860] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 684.172994][ T5860] usb 5-1: no configurations [ 684.173003][ T5860] usb 5-1: can't read configurations, error -22 [ 684.301514][ T5860] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 684.329500][ T5860] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 684.329530][ T5860] usb 5-1: no configurations [ 684.329552][ T5860] usb 5-1: can't read configurations, error -22 [ 684.329807][ T5860] usb usb5-port1: unable to enumerate USB device [ 684.521958][ T2267] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 684.521990][ T2267] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 684.522007][ T2267] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 684.522022][ T2267] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 684.522037][ T2267] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 684.522052][ T2267] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 684.522068][ T2267] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 684.522083][ T2267] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 684.522098][ T2267] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 684.522113][ T2267] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 686.512643][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.512678][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.954277][ T2267] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 687.995599][ T2267] usb 3-1: USB disconnect, device number 20 [ 688.079251][ T30] audit: type=1400 audit(1793612728.642:459): avc: denied { ioctl } for pid=10571 comm="syz.0.1011" path="socket:[25906]" dev="sockfs" ino=25906 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 689.144099][T10581] rxe_eth0 speed is unknown, defaulting to 1000 [ 689.169752][T10582] fido_id[10582]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 689.199076][ T30] audit: type=1400 audit(1793612729.762:460): avc: denied { connect } for pid=10587 comm="syz.2.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 691.833144][ T30] audit: type=1400 audit(1793612732.402:461): avc: denied { ioctl } for pid=10598 comm="syz.2.1020" path="socket:[26155]" dev="sockfs" ino=26155 ioctlcmd=0xc0385868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 693.220581][T10607] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 693.220773][T10607] SELinux: failed to load policy [ 693.220882][ T30] audit: type=1400 audit(1793612733.782:462): avc: denied { load_policy } for pid=10606 comm="syz.0.1023" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 693.307999][T10612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 694.391150][ T5860] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 694.544810][ T5860] usb 3-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 694.545667][ T5860] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 694.545685][ T5860] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 694.583511][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.583531][ T5860] usb 3-1: Product: syz [ 694.583542][ T5860] usb 3-1: Manufacturer: syz [ 694.583551][ T5860] usb 3-1: SerialNumber: syz [ 694.630713][ T5860] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 694.700155][ T5860] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 694.700155][ T5860] Please send a copy of this message to and [ 695.473530][T10647] rxe_eth0 speed is unknown, defaulting to 1000 [ 695.521121][ T2267] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 695.601188][ T985] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 695.648737][ T5860] scsi host1: usb-storage 3-1:1.0 [ 695.673994][ T2267] usb 5-1: not running at top speed; connect to a high speed hub [ 695.674018][ T2267] usb 5-1: New USB device found: idVendor=174f, idProduct=8a12, bcdDevice=b4.d9 [ 695.703077][ T2267] usb 5-1: config 6 has an invalid interface number: 6 but max is 0 [ 695.703100][ T2267] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 695.703113][ T2267] usb 5-1: config 6 has no interface number 0 [ 695.703136][ T2267] usb 5-1: config 6 interface 6 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 695.703154][ T2267] usb 5-1: config 6 interface 6 has no altsetting 0 [ 695.709154][ T5860] usb 3-1: USB disconnect, device number 21 [ 695.776755][ T2267] usb 5-1: string descriptor 0 read error: -22 [ 695.776831][ T2267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.799863][ T985] usb 4-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 695.829194][ T985] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.829225][ T985] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.868559][ T985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.868580][ T985] usb 4-1: Product: syz [ 695.868590][ T985] usb 4-1: Manufacturer: syz [ 695.868600][ T985] usb 4-1: SerialNumber: syz [ 695.871202][ T2267] uvcvideo 5-1:6.6: probe with driver uvcvideo failed with error -22 [ 695.964513][ T985] zaurus 4-1:1.0: probe with driver zaurus failed with error -22 [ 696.124310][ T985] usb 5-1: USB disconnect, device number 18 [ 696.207712][ T10] usb 4-1: USB disconnect, device number 31 [ 697.576846][ T5824] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 698.581104][ T9447] Bluetooth: hci2: command 0x0406 tx timeout [ 700.280583][ T5824] usb 1-1: device descriptor read/all, error -71 [ 702.822782][T10686] rxe_eth0 speed is unknown, defaulting to 1000 [ 707.073728][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 707.241373][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 707.241881][ T10] usb 7-1: New USB device found: idVendor=172f, idProduct=0502, bcdDevice=0.00 [ 707.242766][ T10] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.242786][ T10] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.242803][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 707.242822][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.246698][ T10] usb 7-1: config 0 descriptor?? [ 707.355389][T10722] xt_hashlimit: size too large, truncated to 1048576 [ 708.496431][T10666] Bluetooth: hci5: command 0x1003 tx timeout [ 708.496518][ T5637] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 708.603785][ T10] input: HID 172f:0502 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:172F:0502.0004/input/input8 [ 708.919948][ T30] audit: type=1400 audit(1793612749.482:463): avc: denied { setopt } for pid=10731 comm="syz.0.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 708.997922][ T30] audit: type=1400 audit(1793612749.552:464): avc: denied { write } for pid=10734 comm="syz.2.1064" name="001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 709.044954][T10736] usb usb2: usbfs: process 10736 (syz.2.1064) did not claim interface 1 before use [ 709.204949][ T10] waltop 0003:172F:0502.0004: input,hiddev0,hidraw0: USB HID v80.01 Device [HID 172f:0502] on usb-dummy_hcd.6-1/input0 [ 709.266686][ T10] usb 7-1: USB disconnect, device number 10 [ 709.344317][T10740] ip_tables: iptables: counters copy to user failed while replacing table [ 709.450327][T10742] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 709.450634][ T30] audit: type=1400 audit(1793612750.012:465): avc: denied { mounton } for pid=10741 comm="syz.0.1066" path="/217/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 709.568386][T10739] fido_id[10739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 712.683359][ T30] audit: type=1400 audit(1793612753.242:466): avc: denied { write } for pid=10747 comm="syz.6.1069" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 712.686841][T10751] hub 8-0:1.0: USB hub found [ 712.687637][T10751] hub 8-0:1.0: 1 port detected [ 712.743656][T10754] rxe_eth0 speed is unknown, defaulting to 1000 [ 715.617651][T10782] rxe_eth0 speed is unknown, defaulting to 1000 [ 715.974499][T10795] FAULT_INJECTION: forcing a failure. [ 715.974499][T10795] name failslab, interval 1, probability 5, space 0, times 9993 [ 715.974522][T10795] CPU: 0 UID: 0 PID: 10795 Comm: syz.0.1085 Not tainted syzkaller #0 PREEMPT(full) [ 715.974539][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 715.974549][T10795] Call Trace: [ 715.974553][T10795] [ 715.974559][T10795] dump_stack_lvl+0x100/0x190 [ 715.974586][T10795] should_fail_ex.cold+0x5/0xa [ 715.974606][T10795] should_failslab+0xc2/0x120 [ 715.974621][T10795] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 715.974643][T10795] ? nf_log_net_init+0x9f/0x450 [ 715.974663][T10795] ? __pfx_nf_log_net_init+0x10/0x10 [ 715.974679][T10795] kmemdup_noprof+0x29/0x60 [ 715.974693][T10795] nf_log_net_init+0x9f/0x450 [ 715.974712][T10795] ? __pfx_nf_log_net_init+0x10/0x10 [ 715.974729][T10795] ops_init+0x1e2/0x5f0 [ 715.974747][T10795] setup_net+0x118/0x3a0 [ 715.974762][T10795] ? __pfx_setup_net+0x10/0x10 [ 715.974778][T10795] ? bpf_lsm_namespace_init+0x9/0x10 [ 715.974795][T10795] copy_net_ns+0x340/0x7a0 [ 715.974813][T10795] create_new_namespaces+0x3ea/0xac0 [ 715.974835][T10795] unshare_nsproxy_namespaces+0xf6/0x210 [ 715.974854][T10795] ksys_unshare+0x44f/0x980 [ 715.974871][T10795] ? __pfx_ksys_unshare+0x10/0x10 [ 715.974895][T10795] __x64_sys_unshare+0x31/0x40 [ 715.974911][T10795] do_syscall_64+0x123/0x790 [ 715.974926][T10795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.974940][T10795] RIP: 0033:0x7fe15279f559 [ 715.974959][T10795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.974973][T10795] RSP: 002b:00007fe1535be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 715.974988][T10795] RAX: ffffffffffffffda RBX: 00007fe152a25fa0 RCX: 00007fe15279f559 [ 715.974997][T10795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 715.975005][T10795] RBP: 00007fe152836b50 R08: 0000000000000000 R09: 0000000000000000 [ 715.975014][T10795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.975022][T10795] R13: 00007fe152a26038 R14: 00007fe152a25fa0 R15: 00007ffd2d9c26b8 [ 715.975041][T10795] [ 716.268621][ T30] audit: type=1400 audit(1793612756.832:467): avc: denied { unmount } for pid=9445 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 716.707196][ T30] audit: type=1400 audit(1793612757.272:468): avc: denied { getopt } for pid=10815 comm="syz.0.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 716.789771][T10813] tipc: Started in network mode [ 716.789785][T10813] tipc: Node identity , cluster identity 4711 [ 716.789795][T10813] tipc: Failed to set node id, please configure manually [ 716.789832][T10813] tipc: Enabling of bearer rejected, failed to enable media [ 716.948556][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 717.377435][ T162] Bluetooth: hci6: Frame reassembly failed (-84) [ 717.531622][ T5637] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 717.572776][T10814] rxe_eth0 speed is unknown, defaulting to 1000 [ 719.451445][ T5620] Bluetooth: hci6: command 0x1003 tx timeout [ 719.452115][T10666] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 720.778840][T10840] device-mapper: table: 248:3: snapshot-merge: Cannot get COW device (-ENOENT) [ 720.790384][T10843] ip_tables: iptables: counters copy to user failed while replacing table [ 720.814346][T10840] device-mapper: ioctl: error adding target to table [ 720.975375][ T10] kernel write not supported for file /uinput (pid: 10 comm: kworker/0:1) [ 723.333010][T10861] FAULT_INJECTION: forcing a failure. [ 723.333010][T10861] name fail_futex, interval 1, probability 0, space 0, times 1 [ 723.333034][T10861] CPU: 0 UID: 0 PID: 10861 Comm: syz.4.1110 Not tainted syzkaller #0 PREEMPT(full) [ 723.333051][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 723.333060][T10861] Call Trace: [ 723.333065][T10861] [ 723.333070][T10861] dump_stack_lvl+0x100/0x190 [ 723.333098][T10861] should_fail_ex.cold+0x5/0xa [ 723.333119][T10861] get_futex_key+0x1c9/0x13e0 [ 723.333135][T10861] ? __pfx_get_futex_key+0x10/0x10 [ 723.333147][T10861] ? avc_has_perm_noaudit+0x11e/0x470 [ 723.333162][T10861] ? avc_has_perm_noaudit+0x11e/0x470 [ 723.333176][T10861] ? register_lock_class+0x3f/0x7b0 [ 723.333197][T10861] futex_wake+0xf4/0x5e0 [ 723.333216][T10861] ? __pfx_futex_wake+0x10/0x10 [ 723.333240][T10861] do_futex+0x2b2/0x440 [ 723.333255][T10861] ? __pfx_do_futex+0x10/0x10 [ 723.333269][T10861] ? do_raw_spin_unlock+0x145/0x1e0 [ 723.333285][T10861] __x64_sys_futex+0x34f/0x4d0 [ 723.333302][T10861] ? __pfx___x64_sys_futex+0x10/0x10 [ 723.333323][T10861] do_syscall_64+0x123/0x790 [ 723.333345][T10861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.333359][T10861] RIP: 0033:0x7f21e619f559 [ 723.333371][T10861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.333385][T10861] RSP: 002b:00007f21e71210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 723.333398][T10861] RAX: ffffffffffffffda RBX: 00007f21e6425fa8 RCX: 00007f21e619f559 [ 723.333406][T10861] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f21e6425fac [ 723.333414][T10861] RBP: 00007f21e6425fa0 R08: 0000000000000001 R09: 0000000000000000 [ 723.333422][T10861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.333430][T10861] R13: 00007f21e6426038 R14: 00007ffde4dd51f0 R15: 00007ffde4dd52d8 [ 723.333446][T10861] [ 724.866162][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 725.022673][ T10] usb 3-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00 [ 725.023473][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 137, changing to 11 [ 725.023495][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 57920, setting to 1024 [ 725.023512][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 725.023537][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.056997][ T10] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 725.155548][T10869] rxe_eth0 speed is unknown, defaulting to 1000 [ 725.451213][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 725.487661][ T30] audit: type=1400 audit(1793612766.052:469): avc: denied { mount } for pid=10886 comm="syz.4.1120" name="/" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 725.491666][ T30] audit: type=1400 audit(1793612766.052:470): avc: denied { search } for pid=10886 comm="syz.4.1120" name="/" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.491703][ T30] audit: type=1400 audit(1793612766.052:471): avc: denied { search } for pid=10886 comm="syz.4.1120" name="usb_gadget" dev="configfs" ino=3694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.491727][ T30] audit: type=1400 audit(1793612766.052:472): avc: denied { write search } for pid=10886 comm="syz.4.1120" name="usb_gadget" dev="configfs" ino=3694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.491752][ T30] audit: type=1400 audit(1793612766.052:473): avc: denied { add_name } for pid=10886 comm="syz.4.1120" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.632398][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 725.632484][ T30] audit: type=1400 audit(1793612766.202:474): avc: denied { create } for pid=10886 comm="syz.4.1120" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 725.632900][ T10] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 725.633660][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.633675][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 725.637103][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.637121][ T10] usb 1-1: Product: syz [ 725.637131][ T10] usb 1-1: Manufacturer: syz [ 725.637140][ T10] usb 1-1: SerialNumber: syz [ 725.735251][ T10] usb 1-1: 0:2 : does not exist [ 725.763501][T10882] rxe_eth0 speed is unknown, defaulting to 1000 [ 725.825379][ T30] audit: type=1400 audit(1793612766.392:475): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 725.969645][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 726.120728][ T10] usb 1-1: USB disconnect, device number 18 [ 727.273290][ T5816] usb 3-1: USB disconnect, device number 22 [ 727.329917][T10680] udevd[10680]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 727.450240][T10904] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1124'. [ 727.756811][ T30] audit: type=1400 audit(1793612768.322:476): avc: denied { append } for pid=10913 comm="syz.0.1129" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 727.807431][ T30] audit: type=1400 audit(1793612768.372:477): avc: denied { read } for pid=10913 comm="syz.0.1129" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 727.807476][ T30] audit: type=1400 audit(1793612768.372:478): avc: denied { open } for pid=10913 comm="syz.0.1129" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 729.256417][ T5816] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 729.446337][ T5816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 729.446370][ T5816] usb 3-1: New USB device found: idVendor=0644, idProduct=8020, bcdDevice=0.40 [ 729.447143][ T5816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.447160][ T5816] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 729.447191][ T5816] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 729.507369][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.507389][ T5816] usb 3-1: Product: syz [ 729.507399][ T5816] usb 3-1: Manufacturer: syz [ 729.507409][ T5816] usb 3-1: SerialNumber: syz [ 730.876989][ T30] audit: type=1400 audit(1793612771.432:479): avc: denied { write } for pid=10933 comm="syz.4.1136" name="functions" dev="configfs" ino=27625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 730.877100][ T30] audit: type=1400 audit(1793612771.442:480): avc: denied { read write } for pid=10933 comm="syz.4.1136" name="iso_qlen" dev="configfs" ino=27871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 730.877128][ T30] audit: type=1400 audit(1793612771.442:481): avc: denied { open } for pid=10933 comm="syz.4.1136" path="/231/config/usb_gadget/g1/functions/SourceSink.0/iso_qlen" dev="configfs" ino=27871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 730.955219][ T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 731.089567][ T5816] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 731.089589][ T5816] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 731.089600][ T5816] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 731.089622][ T5816] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 731.150392][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 731.150417][ T10] usb 1-1: New USB device found: idVendor=046d, idProduct=0821, bcdDevice=1.00 [ 731.169683][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 731.195020][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 731.195041][ T10] usb 1-1: Product: syz [ 731.195051][ T10] usb 1-1: Manufacturer: syz [ 731.223266][ T5816] usb 3-1: unit 2 not found! [ 731.223287][ T5816] usb 3-1: unit 0 not found! [ 731.257999][ T10] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 731.306270][ T30] audit: type=1400 audit(1793612771.872:482): avc: denied { connect } for pid=10943 comm="syz.3.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 731.439223][ T10] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 731.439875][ T10] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 731.439916][ T10] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 731.488846][ T10] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71 [ 731.517077][ T10] usb 1-1: USB disconnect, device number 19 [ 731.537938][T10952] veth0: entered promiscuous mode [ 731.540749][T10950] veth0: left promiscuous mode [ 731.637550][ T5860] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 732.678002][T10947] rxe_eth0 speed is unknown, defaulting to 1000 [ 733.661396][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 733.663313][ T5860] usb 5-1: unable to get BOS descriptor or descriptor too short [ 733.663345][ T5860] usb 5-1: New USB device found: idVendor=0582, idProduct=0145, bcdDevice=0.40 [ 733.667999][ T5816] usb 3-1: USB disconnect, device number 23 [ 733.668470][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.668486][ T5860] usb 5-1: Product: syz [ 733.668495][ T5860] usb 5-1: Manufacturer: syz [ 733.668504][ T5860] usb 5-1: SerialNumber: syz [ 735.033059][ T5860] usb 5-1: can't set config #1, error -71 [ 735.038225][ T5860] usb 5-1: USB disconnect, device number 19 [ 738.641532][ T5860] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 738.750559][T10674] udevd[10674]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 738.862930][T10971] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1150'. [ 738.903076][ T2267] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 739.054771][ T2267] usb 4-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00 [ 739.055564][ T2267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 739.055593][ T2267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.465386][T10981] rxe_eth0 speed is unknown, defaulting to 1000 [ 741.488579][ T2267] lg-g15 0003:046D:C222.0005: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 742.862283][ T2267] lg-g15 0003:046D:C222.0005: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 742.895582][ T2267] usb 4-1: USB disconnect, device number 32 [ 743.027683][T10996] fido_id[10996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 743.286390][ T30] audit: type=1400 audit(1793612783.852:483): avc: denied { name_bind } for pid=11007 comm="syz.2.1163" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 743.544051][ T30] audit: type=1400 audit(1793612784.112:484): avc: denied { mounton } for pid=11012 comm="syz.2.1165" path=2F3236382FE91F7189591E9233614B dev="tmpfs" ino=1489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 743.628943][ T30] audit: type=1400 audit(1793612784.192:485): avc: denied { write } for pid=11016 comm="syz.4.1167" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 743.674026][ T30] audit: type=1400 audit(1793612784.242:486): avc: denied { ioctl } for pid=11016 comm="syz.4.1167" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0xc004743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 744.175594][ T5816] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 744.238308][ T2267] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 744.341229][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 744.343006][ T5816] usb 3-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 744.343898][ T5816] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 744.343915][ T5816] usb 3-1: config 179 has no interface number 0 [ 744.343941][ T5816] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 744.343958][ T5816] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 744.343975][ T5816] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 744.343992][ T5816] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 744.344009][ T5816] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 744.344033][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.401334][T11024] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 744.471918][ T2267] usb 7-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 744.476510][ T2267] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 744.476530][ T2267] usb 7-1: config 0 has no interface number 0 [ 744.512328][ T2267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.512348][ T2267] usb 7-1: Product: syz [ 744.512358][ T2267] usb 7-1: Manufacturer: syz [ 744.512368][ T2267] usb 7-1: SerialNumber: syz [ 744.612410][ T2267] usb 7-1: config 0 descriptor?? [ 744.883643][ T5816] usb 3-1: USB disconnect, device number 24 [ 744.883749][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 744.883778][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 745.061358][ T2267] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 745.061385][ T2267] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 745.061537][ T2267] asix 7-1:0.251: probe with driver asix failed with error -71 [ 745.112043][ T2267] usb 7-1: USB disconnect, device number 11 [ 745.122137][ T30] audit: type=1400 audit(1793612785.682:487): avc: denied { listen } for pid=11040 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 745.813543][T11060] ip_tables: iptables: counters copy to user failed while replacing table [ 746.341430][ T30] audit: type=1400 audit(1793612786.902:488): avc: denied { read append } for pid=11073 comm="syz.6.1190" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 746.341470][ T30] audit: type=1400 audit(1793612786.902:489): avc: denied { open } for pid=11073 comm="syz.6.1190" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 746.408730][T11074] xt_hashlimit: size too large, truncated to 1048576 [ 746.533371][ T5816] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 746.682148][ T5816] usb 1-1: New USB device found: idVendor=06a3, idProduct=0cd0, bcdDevice=0.4b [ 746.684136][ T5816] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 746.684157][ T5816] usb 1-1: config 0 has no interface number 0 [ 746.684181][ T5816] usb 1-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.684198][ T5816] usb 1-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.684212][ T5816] usb 1-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 746.684229][ T5816] usb 1-1: config 0 interface 16 has no altsetting 0 [ 746.684249][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.690565][ T5816] usb 1-1: config 0 descriptor?? [ 746.795461][T11080] netlink: 'syz.2.1192': attribute type 3 has an invalid length. [ 746.795479][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 747.062496][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 747.144238][ T5816] hid_parser_main: 1 callbacks suppressed [ 747.144256][ T5816] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 747.144275][ T5816] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 747.144291][ T5816] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 747.144308][ T5816] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 747.144324][ T5816] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 747.144339][ T5816] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 747.144354][ T5816] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 747.144369][ T5816] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 747.144384][ T5816] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 747.144399][ T5816] saitek 0003:06A3:0CD0.0006: unknown main item tag 0x0 [ 747.149078][ T5816] saitek 0003:06A3:0CD0.0006: hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.0-1/input16 [ 747.228130][ T2267] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 747.267649][ T10] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 747.269042][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 747.269065][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.269079][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 747.269104][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.272885][ T10] usb 4-1: config 0 descriptor?? [ 747.345299][ T5816] usb 1-1: USB disconnect, device number 20 [ 747.347068][T11088] Bluetooth: MGMT ver 1.23 [ 747.375818][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.375863][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.411102][ T2267] usb 3-1: Using ep0 maxpacket: 8 [ 747.413043][ T2267] usb 3-1: New USB device found: idVendor=046d, idProduct=c623, bcdDevice=0.00 [ 747.415408][ T2267] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.415432][ T2267] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.415446][ T2267] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 747.415463][ T2267] usb 3-1: config 0 interface 0 has no altsetting 0 [ 747.415483][ T2267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.500409][ T2267] usb 3-1: config 0 descriptor?? [ 747.629952][T11089] fido_id[11089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 747.821805][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 747.958589][ T2267] usbhid 3-1:0.0: can't add hid device: -71 [ 747.958669][ T2267] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 747.987832][ T2267] usb 3-1: USB disconnect, device number 25 [ 748.080455][ T10] usb 4-1: USB disconnect, device number 33 [ 748.114141][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1198'. [ 749.400974][ T30] audit: type=1400 audit(1793612789.962:490): avc: denied { create } for pid=11100 comm="syz.0.1200" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 749.438224][ T30] audit: type=1400 audit(1793612790.002:491): avc: denied { write } for pid=11100 comm="syz.0.1200" name="file0" dev="tmpfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 749.438261][ T30] audit: type=1400 audit(1793612790.002:492): avc: denied { open } for pid=11100 comm="syz.0.1200" path="/242/file0" dev="tmpfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 749.540282][ T30] audit: type=1400 audit(1793612790.102:493): avc: denied { unlink } for pid=5623 comm="syz-executor" name="file0" dev="tmpfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 749.998786][T11113] device-mapper: ioctl: Unable to change name on mapped device syzd0 to one that already exists: syzd2 [ 750.214304][T11122] capability: warning: `syz.3.1209' uses 32-bit capabilities (legacy support in use) [ 750.247153][T11122] FAULT_INJECTION: forcing a failure. [ 750.247153][T11122] name failslab, interval 1, probability 5, space 0, times 9992 [ 750.247178][T11122] CPU: 0 UID: 60928 PID: 11122 Comm: syz.3.1209 Not tainted syzkaller #0 PREEMPT(full) [ 750.247196][T11122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 750.247205][T11122] Call Trace: [ 750.247210][T11122] [ 750.247217][T11122] dump_stack_lvl+0x100/0x190 [ 750.247247][T11122] should_fail_ex.cold+0x5/0xa [ 750.247268][T11122] should_failslab+0xc2/0x120 [ 750.247285][T11122] __kmalloc_noprof+0xfc/0x840 [ 750.247305][T11122] ? x509_get_sig_params+0x3d8/0x710 [ 750.247331][T11122] x509_get_sig_params+0x3d8/0x710 [ 750.247356][T11122] x509_cert_parse+0x4e9/0x910 [ 750.247377][T11122] x509_key_preparse+0x65/0x9c0 [ 750.247401][T11122] asymmetric_key_preparse+0xce/0x1d0 [ 750.247418][T11122] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 750.247436][T11122] __key_create_or_update+0x3f6/0xe10 [ 750.247459][T11122] ? __pfx___key_create_or_update+0x10/0x10 [ 750.247480][T11122] ? lookup_user_key+0x58c/0x14f0 [ 750.247513][T11122] ? __pfx_lookup_user_key+0x10/0x10 [ 750.247548][T11122] key_create_or_update+0x42/0x60 [ 750.247572][T11122] __do_sys_add_key+0x2e8/0x460 [ 750.247588][T11122] ? __sys_socket+0xac/0x260 [ 750.247608][T11122] ? __pfx___do_sys_add_key+0x10/0x10 [ 750.247630][T11122] do_syscall_64+0x123/0x790 [ 750.247646][T11122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.247660][T11122] RIP: 0033:0x7f73ba79f559 [ 750.247674][T11122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.247688][T11122] RSP: 002b:00007f73bb608028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 750.247701][T11122] RAX: ffffffffffffffda RBX: 00007f73baa25fa0 RCX: 00007f73ba79f559 [ 750.247710][T11122] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 750.247718][T11122] RBP: 00007f73ba836b50 R08: ffffffffffffffff R09: 0000000000000000 [ 750.247726][T11122] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 750.247734][T11122] R13: 00007f73baa26038 R14: 00007f73baa25fa0 R15: 00007ffeed84fcf8 [ 750.247753][T11122] [ 751.683654][T11126] rxe_eth0 speed is unknown, defaulting to 1000 [ 755.413851][T11143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 755.876240][ T30] audit: type=1400 audit(1793612796.442:494): avc: denied { create } for pid=11158 comm="syz.0.1222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 756.064855][ T5816] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 756.284290][ T5816] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 756.291320][ T5816] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.304138][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.304157][ T5816] usb 3-1: Product: syz [ 756.304167][ T5816] usb 3-1: Manufacturer: syz [ 756.304176][ T5816] usb 3-1: SerialNumber: syz [ 757.381477][ T2267] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 757.390841][ T5816] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 757.390867][ T5816] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 757.390880][ T5816] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 758.444871][ T5816] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 758.464258][ T2267] usb 1-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=0.40 [ 758.468706][ T2267] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 758.468736][ T2267] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 758.583897][ T2267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.583919][ T2267] usb 1-1: Product: syz [ 758.583928][ T2267] usb 1-1: Manufacturer: syz [ 758.583938][ T2267] usb 1-1: SerialNumber: syz [ 758.790174][ T5816] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 758.850611][ T2267] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 758.850743][ T5816] usb 3-1: USB disconnect, device number 26 [ 758.865780][ T2267] usb 1-1: unit 4 not found! [ 758.869231][ T5816] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 758.892347][ T2267] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 758.892395][ T2267] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 758.926861][T11173] rxe_eth0 speed is unknown, defaulting to 1000 [ 758.949167][ T30] audit: type=1400 audit(1793612799.512:495): avc: denied { bind } for pid=11177 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 759.114639][ T2267] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 759.187026][ T2267] usb 1-1: USB disconnect, device number 21 [ 759.339276][T11181] udevd[11181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.365621][ T30] audit: type=1400 audit(1793612799.932:496): avc: denied { mounton } for pid=11183 comm="syz.2.1231" path="/proc/953/task" dev="proc" ino=29332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 760.702160][ T30] audit: type=1400 audit(1793612801.262:497): avc: denied { wake_alarm } for pid=11203 comm="syz.0.1237" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 760.739310][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 760.750003][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 760.760937][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 760.770099][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 760.779473][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 760.943067][ T30] audit: type=1400 audit(1793612801.512:498): avc: denied { read } for pid=11213 comm="syz.6.1239" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 760.970854][ T30] audit: type=1400 audit(1793612801.542:499): avc: denied { open } for pid=11213 comm="syz.6.1239" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 761.020775][ T30] audit: type=1400 audit(1793612801.582:500): avc: denied { ioctl } for pid=11213 comm="syz.6.1239" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 761.500050][ T85] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.635261][T11225] netlink: 'syz.3.1243': attribute type 7 has an invalid length. [ 761.878682][ T85] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.005565][T11232] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 762.068325][ T85] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.101736][ T5824] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 762.286714][ T85] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.290607][ T5824] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 762.294560][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.294583][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.294599][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 762.294614][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 762.294634][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.382971][ T5824] usb 4-1: config 0 descriptor?? [ 762.804137][T11208] rxe_eth0 speed is unknown, defaulting to 1000 [ 762.833930][ T5824] usbhid 4-1:0.0: can't add hid device: -71 [ 762.834002][ T5824] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 762.858385][ T5824] usb 4-1: USB disconnect, device number 34 [ 762.895321][ T5620] Bluetooth: hci5: command tx timeout [ 762.920944][T11254] FAULT_INJECTION: forcing a failure. [ 762.920944][T11254] name failslab, interval 1, probability 5, space 0, times 9991 [ 762.920968][T11254] CPU: 0 UID: 0 PID: 11254 Comm: syz.6.1254 Not tainted syzkaller #0 PREEMPT(full) [ 762.920987][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 762.920997][T11254] Call Trace: [ 762.921002][T11254] [ 762.921008][T11254] dump_stack_lvl+0x100/0x190 [ 762.921038][T11254] should_fail_ex.cold+0x5/0xa [ 762.921060][T11254] should_failslab+0xc2/0x120 [ 762.921075][T11254] __kmalloc_cache_noprof+0x91/0x6d0 [ 762.921092][T11254] ? raw_open+0x89/0x490 [ 762.921113][T11254] raw_open+0x89/0x490 [ 762.921131][T11254] ? __pfx_raw_open+0x10/0x10 [ 762.921147][T11254] misc_open+0x26d/0x450 [ 762.921168][T11254] ? __pfx_misc_open+0x10/0x10 [ 762.921184][T11254] chrdev_open+0x234/0x6a0 [ 762.921200][T11254] ? __pfx_chrdev_open+0x10/0x10 [ 762.921215][T11254] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 762.921238][T11254] do_dentry_open+0x674/0x1470 [ 762.921251][T11254] ? __pfx_chrdev_open+0x10/0x10 [ 762.921269][T11254] vfs_open_consume+0xcc/0x460 [ 762.921289][T11254] path_openat+0x1547/0x23f0 [ 762.921307][T11254] ? __pfx_path_openat+0x10/0x10 [ 762.921327][T11254] do_file_open+0x20e/0x430 [ 762.921343][T11254] ? __pfx_do_file_open+0x10/0x10 [ 762.921370][T11254] ? _raw_spin_unlock+0x28/0x50 [ 762.921388][T11254] ? alloc_fd+0x471/0x7a0 [ 762.921409][T11254] do_sys_openat2+0x163/0x1d0 [ 762.921426][T11254] ? __pfx_do_sys_openat2+0x10/0x10 [ 762.921441][T11254] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 762.921466][T11254] __x64_sys_openat+0x12d/0x210 [ 762.921483][T11254] ? __pfx___x64_sys_openat+0x10/0x10 [ 762.921515][T11254] do_syscall_64+0x123/0x790 [ 762.921549][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.921567][T11254] RIP: 0033:0x7f72eb35fd8e [ 762.921580][T11254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 762.921592][T11254] RSP: 002b:00007f72ec1fdea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 762.921606][T11254] RAX: ffffffffffffffda RBX: 00007f72ec2006c0 RCX: 00007f72eb35fd8e [ 762.921615][T11254] RDX: 0000000000000002 RSI: 00007f72eb435ee2 RDI: ffffffffffffff9c [ 762.921624][T11254] RBP: 00007f72eb436b50 R08: 0000000000000000 R09: 0000000000000000 [ 762.921632][T11254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 762.921641][T11254] R13: 0000200000000f00 R14: 0000000000000002 R15: 00007ffc4c3446b8 [ 762.921660][T11254] [ 763.293204][ T85] bridge_slave_1: left allmulticast mode [ 763.293227][ T85] bridge_slave_1: left promiscuous mode [ 763.293361][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.343490][ T85] bridge_slave_0: left allmulticast mode [ 763.343512][ T85] bridge_slave_0: left promiscuous mode [ 763.343681][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.368999][ T30] audit: type=1400 audit(1793612804.922:501): avc: denied { read } for pid=11267 comm="syz.3.1258" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 764.803696][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.824992][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.843047][ T85] bond0 (unregistering): Released all slaves [ 764.882319][ T85] bond1 (unregistering): (slave veth3): Releasing backup interface [ 764.883905][ T85] bond1 (unregistering): Released all slaves [ 764.923878][ T30] audit: type=1400 audit(1793612805.492:502): avc: denied { write } for pid=11258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.971300][ T5620] Bluetooth: hci5: command tx timeout [ 765.339916][ T30] audit: type=1400 audit(1793612805.902:503): avc: denied { write } for pid=11292 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 765.406846][T11296] input: syz0 as /devices/virtual/input/input10 [ 765.690911][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 766.020808][ T30] audit: type=1400 audit(1793612806.582:504): avc: denied { read } for pid=11309 comm="syz.3.1260" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 766.050959][ T30] audit: type=1400 audit(1793612806.612:505): avc: denied { open } for pid=11309 comm="syz.3.1260" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 766.398589][T11324] 9p: Invalid uid '0x00000000ffffffff' [ 766.459283][T11208] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.461795][T11208] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.461909][T11208] bridge_slave_0: entered allmulticast mode [ 766.524068][T11208] bridge_slave_0: entered promiscuous mode [ 766.539938][T11208] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.539990][T11208] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.540065][T11208] bridge_slave_1: entered allmulticast mode [ 766.572381][T11208] bridge_slave_1: entered promiscuous mode [ 766.789716][ T85] hsr_slave_0: left promiscuous mode [ 766.790213][ T85] hsr_slave_1: left promiscuous mode [ 766.790639][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.790651][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.791141][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.791152][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.851805][ T85] veth1_macvtap: left promiscuous mode [ 766.851833][ T85] veth0_macvtap: left promiscuous mode [ 766.851910][ T85] veth1_vlan: left promiscuous mode [ 766.851946][ T85] veth0_vlan: left promiscuous mode [ 766.984337][ T5824] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 767.052436][ T5620] Bluetooth: hci5: command tx timeout [ 767.130612][ T30] audit: type=1400 audit(1793612807.692:506): avc: denied { getopt } for pid=11339 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 767.152653][ T5824] usb 3-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=1.00 [ 767.154970][ T5824] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 767.154988][ T5824] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.155000][ T5824] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 767.155027][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.159736][ T5824] gspca_main: spca501-2.14.0 probing 0000:0000 [ 767.285775][ T30] audit: type=1400 audit(1793612807.852:507): avc: denied { write } for pid=11310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.388259][ T5824] gspca_spca501: reg write: error -71 [ 767.388272][ T5824] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 767.388323][ T5824] spca501 3-1:1.0: probe with driver spca501 failed with error -22 [ 767.388611][ T5824] uvcvideo 3-1:1.0: Found multiple Units with ID 1 [ 767.388640][ T5824] uvcvideo 3-1:1.0: Found UVC 71.01 device (0000:0000) [ 767.388674][ T5824] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 767.459179][ T5824] usb 3-1: USB disconnect, device number 27 [ 769.613128][ T5620] Bluetooth: hci5: command tx timeout [ 769.657727][ T30] audit: type=1400 audit(1793612810.222:508): avc: denied { write } for pid=11350 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.179263][ T85] team0 (unregistering): Port device team_slave_1 removed [ 771.226075][ T85] team0 (unregistering): Port device team_slave_0 removed [ 774.728932][T11208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.749870][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 775.714845][T11208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.895656][ T30] audit: type=1400 audit(1793612816.462:509): avc: granted { setsecparam } for pid=11374 comm="syz.3.1291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 775.898682][T11208] team0: Port device team_slave_0 added [ 775.922684][T11208] team0: Port device team_slave_1 added [ 776.063636][T11208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.063658][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.063674][T11208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.069889][T11208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.069900][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.069915][T11208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.285538][ T2267] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 776.341255][T11208] hsr_slave_0: entered promiscuous mode [ 776.345519][T11208] hsr_slave_1: entered promiscuous mode [ 776.345856][T11208] debugfs: 'hsr0' already exists in 'hsr' [ 776.345865][T11208] Cannot create hsr debugfs directory [ 776.455152][ T2267] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 776.457205][ T2267] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.457228][ T2267] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.457242][ T2267] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 776.457257][ T2267] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 776.457279][ T2267] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.459110][ T2267] usb 7-1: config 0 descriptor?? [ 776.575838][T11387] syzkaller0: entered promiscuous mode [ 776.575857][T11387] syzkaller0: entered allmulticast mode [ 776.767581][T11405] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1298'. [ 776.975151][ T2267] hid_parser_main: 21 callbacks suppressed [ 776.975173][ T2267] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 776.975192][ T2267] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 776.975213][ T2267] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 776.975230][ T2267] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 777.022123][ T985] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 777.029794][ T2267] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 777.181205][ T985] usb 3-1: New USB device found: idVendor=06a3, idProduct=0cd0, bcdDevice=0.4b [ 777.188294][ T2267] usb 7-1: USB disconnect, device number 12 [ 777.217600][ T985] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 777.217620][ T985] usb 3-1: config 0 has no interface number 0 [ 777.217645][ T985] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.217661][ T985] usb 3-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.217675][ T985] usb 3-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 777.217691][ T985] usb 3-1: config 0 interface 16 has no altsetting 0 [ 777.217711][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.286042][ T985] usb 3-1: config 0 descriptor?? [ 777.346790][ T30] audit: type=1400 audit(1793612817.912:510): avc: denied { write } for pid=11396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.385515][T11417] fido_id[11417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 777.542610][ T30] audit: type=1326 audit(1793612818.112:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.2.1299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82379f559 code=0x7ffc0000 [ 777.542653][ T30] audit: type=1326 audit(1793612818.112:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.2.1299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82379f559 code=0x7ffc0000 [ 777.547493][ T30] audit: type=1326 audit(1793612818.112:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.2.1299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd82379f559 code=0x7ffc0000 [ 777.547533][ T30] audit: type=1326 audit(1793612818.112:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.2.1299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82379f559 code=0x7ffc0000 [ 777.547672][ T30] audit: type=1326 audit(1793612818.112:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.2.1299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82379f559 code=0x7ffc0000 [ 777.610366][ T30] audit: type=1326 audit(1793612818.172:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.2.1299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd82379f559 code=0x7ffc0000 [ 777.610452][ T30] audit: type=1326 audit(1793612818.172:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.2.1299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82379f559 code=0x7ffc0000 [ 777.610480][ T30] audit: type=1326 audit(1793612818.172:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11406 comm="syz.2.1299" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82379f559 code=0x7ffc0000 [ 778.050854][ T985] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/0003:06A3:0CD0.0009/input/input13 [ 778.129857][ T985] saitek 0003:06A3:0CD0.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.2-1/input16 [ 778.884080][ T985] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 779.052123][ T985] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 779.054065][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.054090][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.054104][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 779.054121][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 779.054143][ T985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.056161][ T985] usb 4-1: config 0 descriptor?? [ 779.478611][ T985] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.478636][ T985] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.478653][ T985] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.478670][ T985] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 779.532662][ T985] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 779.699347][ T985] usb 4-1: USB disconnect, device number 35 [ 779.960131][ T5824] usb 3-1: USB disconnect, device number 28 [ 782.481250][ T5824] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 782.672959][ T5824] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 782.695357][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.695380][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.695395][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 782.695411][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 782.695433][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.701095][ T5824] usb 3-1: config 0 descriptor?? [ 783.158536][ T5824] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 783.158562][ T5824] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 783.158579][ T5824] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 783.158596][ T5824] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 783.199559][ T5824] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 783.382859][ T5824] usb 3-1: USB disconnect, device number 29 [ 783.585069][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 784.973391][ T5824] kernel write not supported for file /input/event2 (pid: 5824 comm: kworker/0:5) [ 787.410061][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 787.410076][ T30] audit: type=1400 audit(1793612827.972:537): avc: denied { ioctl } for pid=11500 comm="syz.3.1332" path="/287/trace/events/sched/sched_switch/trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 787.570553][T11502] rxe_eth0 speed is unknown, defaulting to 1000 [ 787.602239][ T30] audit: type=1400 audit(1793612828.172:538): avc: denied { read } for pid=11508 comm="syz.6.1333" path="socket:[31304]" dev="sockfs" ino=31304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 787.704139][ T30] audit: type=1400 audit(1793612828.272:539): avc: denied { write } for pid=11512 comm="syz.3.1334" name="functions" dev="configfs" ino=27625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 787.704826][T11513] file system registered [ 787.752605][T11513] unloading [ 787.754380][ T30] audit: type=1400 audit(1793612828.322:540): avc: denied { write } for pid=11512 comm="syz.3.1334" name="functions" dev="configfs" ino=27625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 787.754426][ T30] audit: type=1400 audit(1793612828.322:541): avc: denied { remove_name } for pid=11512 comm="syz.3.1334" name="ffs.usb0" dev="configfs" ino=31339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 787.754453][ T30] audit: type=1400 audit(1793612828.322:542): avc: denied { rmdir } for pid=11512 comm="syz.3.1334" name="ffs.usb0" dev="configfs" ino=31339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 788.202551][ T5824] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 788.312026][ T30] audit: type=1400 audit(1793612828.882:543): avc: denied { write } for pid=11497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.312680][T11208] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 788.354579][T11208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.371437][ T5824] usb 3-1: Using ep0 maxpacket: 16 [ 788.373765][ T5824] usb 3-1: New USB device found: idVendor=1e7d, idProduct=2d50, bcdDevice=0.00 [ 788.374839][T11208] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 788.376675][ T5824] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.376697][ T5824] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 788.376714][ T5824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 788.376734][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.378248][ T5824] usb 3-1: config 0 descriptor?? [ 788.484603][T11208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.488118][T11208] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 788.522192][T11208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.523556][T11208] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 788.558330][T11208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.747942][ T30] audit: type=1400 audit(1793612829.312:544): avc: denied { write } for pid=11539 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.853722][T11208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.940904][ T5824] input: HID 1e7d:2d50 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1E7D:2D50.000C/input/input16 [ 789.005730][ T5281] 8021q: adding VLAN 0 to HW filter on device eth12 [ 789.054518][ T5824] kovaplus 0003:1E7D:2D50.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 789.125683][T11208] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.206957][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.207024][ T5946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.257151][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.257216][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.380028][ T30] audit: type=1400 audit(1793612829.942:545): avc: denied { write } for pid=11547 comm="syz.6.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 789.522958][T11552] input: syz1 as /devices/virtual/input/input17 [ 789.599643][ T985] usb 3-1: USB disconnect, device number 30 [ 789.803245][T11561] tipc: Started in network mode [ 789.803266][T11561] tipc: Node identity 7f000001, cluster identity 4711 [ 789.804249][T11561] tipc: New replicast peer: 127.0.0.1 [ 789.827961][T11561] tipc: Enabled bearer , priority 10 [ 789.845335][T11561] tipc: Disabling bearer [ 789.932238][ T5824] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 790.095860][ T5824] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 790.111200][ T5824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 790.111226][ T5824] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 790.111243][ T5824] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 790.155263][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 790.155285][ T5824] usb 7-1: SerialNumber: syz [ 790.186297][T11556] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 790.186368][T11556] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 790.309332][ T30] audit: type=1400 audit(1793612830.872:546): avc: denied { map } for pid=11569 comm="syz.3.1347" path="/dev/usbmon2" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 790.455832][T11556] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 790.455932][T11556] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 790.693581][ T5824] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 790.785259][ T5824] usb 7-1: USB disconnect, device number 13 [ 790.861322][ T2267] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 790.959314][T11208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.011913][ T2267] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 791.012705][ T2267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 791.012727][ T2267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 791.012750][ T2267] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 791.012767][ T2267] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 791.014655][ T2267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.014674][ T2267] usb 4-1: Product: syz [ 791.014683][ T2267] usb 4-1: Manufacturer: syz [ 791.014693][ T2267] usb 4-1: SerialNumber: syz [ 791.068592][T11580] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 791.121884][ T2267] cdc_mbim 4-1:1.0: skipping garbage [ 791.207932][T11593] rxe_eth0 speed is unknown, defaulting to 1000 [ 791.347866][T11580] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 791.347946][T11580] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 791.683789][T11208] veth0_vlan: entered promiscuous mode [ 791.712978][T11208] veth1_vlan: entered promiscuous mode [ 791.805404][T11208] veth0_macvtap: entered promiscuous mode [ 791.832978][T11598] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 791.834701][T11208] veth1_macvtap: entered promiscuous mode [ 791.920494][T11208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.945873][T11208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.978970][T11580] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 791.979053][T11580] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 791.979241][ T2267] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 791.979255][ T2267] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 791.990853][T11598] usb 3-1: New USB device found: idVendor=174c, idProduct=55aa, bcdDevice=1.00 [ 792.027173][ T152] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.040691][T11598] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.040737][T11598] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 792.052352][ T152] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.069267][ T6261] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.070228][ T6261] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.116318][T11598] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.116337][T11598] usb 3-1: Product: syz [ 792.116347][T11598] usb 3-1: Manufacturer: syz [ 792.116356][T11598] usb 3-1: SerialNumber: syz [ 792.148318][T11598] usb-storage 3-1:1.0: USB Mass Storage device detected [ 792.168031][T11598] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 792.185460][T11598] scsi host1: usb-storage 3-1:1.0 [ 792.336439][ T2267] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 792.480437][T11603] SELinux: failed to load policy [ 792.539707][ T2267] wwan wwan0: port wwan0mbim0 attached [ 792.681819][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.681836][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.686526][T11598] usb 3-1: USB disconnect, device number 31 [ 792.782770][ T2267] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, ea:64:a7:7e:36:24 [ 792.830410][ T2267] usb 4-1: USB disconnect, device number 36 [ 792.878813][ T2267] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 793.023310][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 793.023323][ T30] audit: type=1400 audit(1793612833.592:548): avc: denied { create } for pid=11622 comm="syz.6.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 793.069821][ T30] audit: type=1400 audit(1793612833.632:549): avc: denied { connect } for pid=11622 comm="syz.6.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 793.134142][ T5946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.134159][ T5946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.140453][ T2267] wwan wwan0: port wwan0mbim0 disconnected [ 793.687158][ T30] audit: type=1400 audit(1793612834.252:550): avc: denied { mounton } for pid=11636 comm="syz.0.1366" path="/281/dir0/per_cpu/cpu0/trace_pipe" dev="tracefs" ino=4249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 793.687650][ T985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=985 comm=kworker/0:2 [ 793.910723][ T30] audit: type=1400 audit(1793612834.472:551): avc: denied { listen } for pid=11644 comm="syz.2.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 796.959599][ T985] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 797.364363][ T985] usb 7-1: device descriptor read/all, error -71 [ 797.631553][T11679] FAULT_INJECTION: forcing a failure. [ 797.631553][T11679] name failslab, interval 1, probability 5, space 0, times 9990 [ 797.631576][T11679] CPU: 0 UID: 0 PID: 11679 Comm: syz.3.1382 Not tainted syzkaller #0 PREEMPT(full) [ 797.631592][T11679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 797.631601][T11679] Call Trace: [ 797.631606][T11679] [ 797.631612][T11679] dump_stack_lvl+0x100/0x190 [ 797.631640][T11679] should_fail_ex.cold+0x5/0xa [ 797.631662][T11679] should_failslab+0xc2/0x120 [ 797.631676][T11679] kmem_cache_alloc_noprof+0x92/0x6a0 [ 797.631696][T11679] ? sk_prot_alloc+0x60/0x2a0 [ 797.631717][T11679] sk_prot_alloc+0x60/0x2a0 [ 797.631735][T11679] sk_alloc+0x36/0xe80 [ 797.631748][T11679] unix_create1+0xa6/0x700 [ 797.631769][T11679] unix_create+0x10f/0x1b0 [ 797.631788][T11679] __sock_create+0x339/0x860 [ 797.631809][T11679] p9_fd_create_unix+0x20a/0x350 [ 797.631829][T11679] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 797.631856][T11679] ? lockdep_init_map_type+0x5c/0x250 [ 797.631877][T11679] p9_client_create+0x563/0xd40 [ 797.631893][T11679] ? __pfx_p9_client_create+0x10/0x10 [ 797.631912][T11679] ? lockdep_init_map_type+0x5c/0x250 [ 797.631930][T11679] ? __raw_spin_lock_init+0x3a/0x110 [ 797.631944][T11679] v9fs_session_init+0x3c/0xdd0 [ 797.631963][T11679] ? v9fs_get_tree+0x9c/0xb60 [ 797.631980][T11679] v9fs_get_tree+0xb8/0xb60 [ 797.631992][T11679] ? rcu_is_watching+0x13/0xc0 [ 797.632017][T11679] ? __pfx_v9fs_get_tree+0x10/0x10 [ 797.632033][T11679] ? bpf_lsm_capable+0x9/0x10 [ 797.632046][T11679] ? security_capable+0x80/0x260 [ 797.632064][T11679] vfs_get_tree+0x92/0x320 [ 797.632083][T11679] path_mount+0x7d0/0x2850 [ 797.632104][T11679] ? __pfx_path_mount+0x10/0x10 [ 797.632121][T11679] ? lockdep_hardirqs_on+0x7d/0x110 [ 797.632135][T11679] ? putname+0xb1/0x110 [ 797.632150][T11679] ? kmem_cache_free+0x127/0x6c0 [ 797.632171][T11679] ? __x64_sys_mount+0x293/0x310 [ 797.632189][T11679] __x64_sys_mount+0x293/0x310 [ 797.632207][T11679] ? __pfx___x64_sys_mount+0x10/0x10 [ 797.632229][T11679] do_syscall_64+0x123/0x790 [ 797.632243][T11679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.632257][T11679] RIP: 0033:0x7f73ba79f559 [ 797.632283][T11679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.632296][T11679] RSP: 002b:00007f73bb608028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 797.632311][T11679] RAX: ffffffffffffffda RBX: 00007f73baa25fa0 RCX: 00007f73ba79f559 [ 797.632319][T11679] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 00002000000000c0 [ 797.632327][T11679] RBP: 00007f73ba836b50 R08: 0000200000000100 R09: 0000000000000000 [ 797.632335][T11679] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 797.632343][T11679] R13: 00007f73baa26038 R14: 00007f73baa25fa0 R15: 00007ffeed84fcf8 [ 797.632362][T11679] [ 797.632419][T11679] 9pnet_fd: p9_fd_create_unix (11679): problem creating socket [ 797.771180][ T985] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 797.979048][ T985] usb 7-1: New USB device found: idVendor=06cb, idProduct=2968, bcdDevice=0.00 [ 797.993738][ T985] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.993762][ T985] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.993779][ T985] usb 7-1: config 0 interface 0 has no altsetting 0 [ 797.993798][ T985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.996830][ T985] usb 7-1: config 0 descriptor?? [ 799.326545][ T985] itetech 0003:06CB:2968.000D: unbalanced collection at end of report description [ 799.328650][ T985] itetech 0003:06CB:2968.000D: probe with driver itetech failed with error -22 [ 800.338144][T11689] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1386'. [ 801.627191][ T5860] usb 7-1: USB disconnect, device number 15 [ 802.131472][ T5860] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 802.208870][ T30] audit: type=1400 audit(1793612842.772:552): avc: denied { write } for pid=11690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 802.282146][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 802.282594][ T5860] usb 4-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 802.283408][ T5860] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 802.283440][ T5860] usb 4-1: config 0 has no interface number 0 [ 802.283464][ T5860] usb 4-1: config 0 interface 184 has no altsetting 0 [ 802.285860][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.285878][ T5860] usb 4-1: Product: syz [ 802.285887][ T5860] usb 4-1: Manufacturer: syz [ 802.285897][ T5860] usb 4-1: SerialNumber: syz [ 802.338264][ T5860] usb 4-1: config 0 descriptor?? [ 802.513148][ T30] audit: type=1400 audit(1793612843.082:553): avc: denied { write } for pid=11719 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.387381][ T30] audit: type=1400 audit(1793612843.952:554): avc: denied { write } for pid=11728 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.426796][ T5860] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 803.426821][ T5860] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 803.541885][T11608] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 803.565836][ T30] audit: type=1400 audit(1793612844.132:555): avc: denied { write } for pid=11754 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.631442][ T5860] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 803.631466][ T5860] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 803.631491][ T5860] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 803.631624][ T5860] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 803.685630][ T5860] usb 4-1: USB disconnect, device number 37 [ 803.701229][T11608] usb 3-1: Using ep0 maxpacket: 16 [ 803.703499][T11608] usb 3-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 803.707038][T11608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.727847][T11608] usb 3-1: config 0 descriptor?? [ 803.751615][T11608] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 803.752229][T11608] usb 3-1: Detected FT2233HP [ 803.946997][T11608] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 803.950366][T11608] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 804.309640][ T30] audit: type=1400 audit(1793612844.872:556): avc: denied { write } for pid=11757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.469230][T11772] netlink: 'syz.3.1403': attribute type 29 has an invalid length. [ 804.498119][ T30] audit: type=1400 audit(1793612845.062:557): avc: denied { write } for pid=11771 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.356332][ T30] audit: type=1400 audit(1793612845.922:558): avc: denied { write } for pid=11776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.584384][ T30] audit: type=1400 audit(1793612846.152:559): avc: denied { write } for pid=11788 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.013525][T11780] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate [ 806.014031][T11780] ftdi_sio ttyUSB0: failed to set flow control: -32 [ 806.055369][T11780] ftdi_sio ttyUSB0: failed to get modem status: -32 [ 806.058778][T11780] ftdi_sio ttyUSB0: error from flowcontrol urb [ 806.076852][T11608] usb 3-1: USB disconnect, device number 32 [ 806.092930][T11608] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 806.093225][T11608] ftdi_sio 3-1:0.0: device disconnected [ 806.494943][T11796] rxe_eth0 speed is unknown, defaulting to 1000 [ 806.535189][ T30] audit: type=1400 audit(1793612847.102:560): avc: denied { bind } for pid=11795 comm="syz.6.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 806.981415][ T5860] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 807.131061][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 807.131652][ T5860] usb 3-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 807.132714][ T5860] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 807.132730][ T5860] usb 3-1: config 0 has no interface number 0 [ 807.132755][ T5860] usb 3-1: config 0 interface 184 has no altsetting 0 [ 807.134374][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.134390][ T5860] usb 3-1: Product: syz [ 807.134400][ T5860] usb 3-1: Manufacturer: syz [ 807.134409][ T5860] usb 3-1: SerialNumber: syz [ 807.138617][ T5860] usb 3-1: config 0 descriptor?? [ 807.624616][T11811] FAULT_INJECTION: forcing a failure. [ 807.624616][T11811] name fail_futex, interval 1, probability 0, space 0, times 0 [ 807.624642][T11811] CPU: 0 UID: 60928 PID: 11811 Comm: syz.6.1412 Not tainted syzkaller #0 PREEMPT(full) [ 807.624659][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 807.624668][T11811] Call Trace: [ 807.624673][T11811] [ 807.624682][T11811] dump_stack_lvl+0x100/0x190 [ 807.624712][T11811] should_fail_ex.cold+0x5/0xa [ 807.624734][T11811] get_futex_key+0x1c9/0x13e0 [ 807.624750][T11811] ? __pfx_get_futex_key+0x10/0x10 [ 807.624763][T11811] ? lock_acquire+0x1d1/0x380 [ 807.624781][T11811] ? __fget_files+0x34/0x3d0 [ 807.624798][T11811] futex_wake+0xf4/0x5e0 [ 807.624817][T11811] ? __pfx_futex_wake+0x10/0x10 [ 807.624836][T11811] ? fdget+0x18b/0x210 [ 807.624850][T11811] ? __sys_recvfrom+0x258/0x2f0 [ 807.624867][T11811] do_futex+0x2b2/0x440 [ 807.624882][T11811] ? __pfx_do_futex+0x10/0x10 [ 807.624902][T11811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 807.624920][T11811] __x64_sys_futex+0x34f/0x4d0 [ 807.624937][T11811] ? __pfx___x64_sys_futex+0x10/0x10 [ 807.624960][T11811] do_syscall_64+0x123/0x790 [ 807.624976][T11811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.624990][T11811] RIP: 0033:0x7f72eb39f559 [ 807.625002][T11811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.625017][T11811] RSP: 002b:00007f72ec2000e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 807.625031][T11811] RAX: ffffffffffffffda RBX: 00007f72eb625fa8 RCX: 00007f72eb39f559 [ 807.625039][T11811] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f72eb625fac [ 807.625048][T11811] RBP: 00007f72eb625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 807.625055][T11811] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 807.625063][T11811] R13: 00007f72eb626038 R14: 00007ffc4c3445d0 R15: 00007ffc4c3446b8 [ 807.625080][T11811] [ 808.279084][ T5860] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 808.279109][ T5860] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 808.509741][ T5860] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 808.509779][ T5860] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 808.509792][ T5860] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 808.509821][ T5860] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 808.509951][ T5860] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 808.584450][ T5860] usb 3-1: USB disconnect, device number 33 [ 808.812868][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.812904][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.126262][T10666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 809.144625][T10666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 809.147924][T10666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 809.148750][T10666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 809.175754][T10666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 810.010456][T11841] FAULT_INJECTION: forcing a failure. [ 810.010456][T11841] name fail_futex, interval 1, probability 0, space 0, times 0 [ 810.010480][T11841] CPU: 0 UID: 60928 PID: 11841 Comm: syz.3.1423 Not tainted syzkaller #0 PREEMPT(full) [ 810.010498][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 810.010507][T11841] Call Trace: [ 810.010512][T11841] [ 810.010517][T11841] dump_stack_lvl+0x100/0x190 [ 810.010545][T11841] should_fail_ex.cold+0x5/0xa [ 810.010565][T11841] get_futex_key+0x1c9/0x13e0 [ 810.010582][T11841] ? __pfx_get_futex_key+0x10/0x10 [ 810.010595][T11841] ? lock_acquire+0x1d1/0x380 [ 810.010612][T11841] ? __fget_files+0x34/0x3d0 [ 810.010630][T11841] futex_wake+0xf4/0x5e0 [ 810.010648][T11841] ? __pfx_futex_wake+0x10/0x10 [ 810.010667][T11841] ? fdget+0x18b/0x210 [ 810.010681][T11841] ? __sys_recvfrom+0x258/0x2f0 [ 810.010698][T11841] do_futex+0x2b2/0x440 [ 810.010713][T11841] ? __pfx_do_futex+0x10/0x10 [ 810.010728][T11841] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 810.010746][T11841] __x64_sys_futex+0x34f/0x4d0 [ 810.010763][T11841] ? __pfx___x64_sys_futex+0x10/0x10 [ 810.010784][T11841] do_syscall_64+0x123/0x790 [ 810.010800][T11841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.010813][T11841] RIP: 0033:0x7f73ba79f559 [ 810.010825][T11841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.010837][T11841] RSP: 002b:00007f73bb6080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 810.010850][T11841] RAX: ffffffffffffffda RBX: 00007f73baa25fa8 RCX: 00007f73ba79f559 [ 810.010858][T11841] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f73baa25fac [ 810.010867][T11841] RBP: 00007f73baa25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 810.010874][T11841] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 810.010882][T11841] R13: 00007f73baa26038 R14: 00007ffeed84fc10 R15: 00007ffeed84fcf8 [ 810.010899][T11841] [ 810.504474][T11818] rxe_eth0 speed is unknown, defaulting to 1000 [ 811.127445][T11858] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1428'. [ 811.212059][T10666] Bluetooth: hci0: command tx timeout [ 811.525864][ T30] audit: type=1400 audit(1793612852.092:561): avc: denied { map } for pid=11867 comm="syz.3.1432" path="socket:[33511]" dev="sockfs" ino=33511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 811.854453][T11818] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.855748][T11818] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.855867][T11818] bridge_slave_0: entered allmulticast mode [ 811.858545][T11818] bridge_slave_0: entered promiscuous mode [ 811.903736][T11818] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.905485][T11818] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.905600][T11818] bridge_slave_1: entered allmulticast mode [ 811.910908][T11818] bridge_slave_1: entered promiscuous mode [ 812.058040][T11818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.082652][T11818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.131329][ T30] audit: type=1400 audit(1793612852.702:562): avc: denied { write } for pid=11888 comm="syz.6.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 812.204532][T11818] team0: Port device team_slave_0 added [ 812.219425][T11818] team0: Port device team_slave_1 added [ 812.265877][T11892] netlink: 'syz.7.1440': attribute type 23 has an invalid length. [ 812.265917][T11892] IPv6: NLM_F_CREATE should be specified when creating new route [ 812.266204][T11892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 812.266213][T11892] IPv6: NLM_F_CREATE should be set when creating new route [ 812.365173][T11818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.365186][T11818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.365203][T11818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.369715][T11818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.369745][T11818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.369761][T11818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.596518][T11818] hsr_slave_0: entered promiscuous mode [ 812.597194][T11818] hsr_slave_1: entered promiscuous mode [ 812.600678][T11818] debugfs: 'hsr0' already exists in 'hsr' [ 812.600692][T11818] Cannot create hsr debugfs directory [ 813.724571][T10666] Bluetooth: hci0: command tx timeout [ 814.556819][T11910] SELinux: Context is not valid (left unmapped). [ 814.575119][ T30] audit: type=1400 audit(1793612855.132:563): avc: denied { relabelto } for pid=11908 comm="syz.2.1447" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 814.606511][ T30] audit: type=1400 audit(1793612855.172:564): avc: denied { associate } for pid=11908 comm="syz.2.1447" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1853 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 814.699195][ T30] audit: type=1400 audit(1793612855.262:565): avc: denied { unlink } for pid=5629 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=1853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 814.748133][ T30] audit: type=1400 audit(1793612855.312:566): avc: denied { connect } for pid=11911 comm="syz.6.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 814.773314][ T30] audit: type=1400 audit(1793612855.342:567): avc: denied { shutdown } for pid=11911 comm="syz.6.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 815.065064][ T30] audit: type=1400 audit(1793612855.632:568): avc: denied { allowed } for pid=11917 comm="syz.6.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 816.040594][T10666] Bluetooth: hci0: command tx timeout [ 818.091696][T10666] Bluetooth: hci0: command tx timeout [ 818.371314][T11609] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 818.400022][T11923] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 818.562429][T11818] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 818.584150][T11818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 818.586348][T11818] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 818.612850][T11818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 818.613587][T11818] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 818.657858][T11818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.658931][T11818] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 818.693036][T11818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 819.072562][T11818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.112030][T11818] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.132169][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.132230][ T5946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.167426][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.167499][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.341937][T11609] usb 7-1: device descriptor read/64, error -71 [ 819.582141][T11609] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 819.731861][T11609] usb 7-1: Using ep0 maxpacket: 16 [ 819.735135][T11609] usb 7-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 819.735978][T11609] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.736000][T11609] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.736015][T11609] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 819.736032][T11609] usb 7-1: config 0 interface 0 has no altsetting 0 [ 819.736051][T11609] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.737524][T11609] usb 7-1: config 0 descriptor?? [ 820.408708][ T5860] usb 7-1: USB disconnect, device number 17 [ 821.091457][ T2267] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 821.246181][ T2267] usb 4-1: New USB device found: idVendor=05ab, idProduct=0301, bcdDevice=1.00 [ 821.246963][ T2267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 821.246980][ T2267] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 821.246995][ T2267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 821.247008][ T2267] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 821.279588][ T2267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.279606][ T2267] usb 4-1: Product: syz [ 821.279615][ T2267] usb 4-1: Manufacturer: syz [ 821.279625][ T2267] usb 4-1: SerialNumber: syz [ 821.281312][ T2267] usb 4-1: config 0 descriptor?? [ 821.296064][ T2267] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 821.676151][T11980] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1469'. [ 821.776498][ T2267] scsi host1: usb-storage 4-1:0.0 [ 821.813747][ T2267] usb 4-1: USB disconnect, device number 38 [ 822.920548][ T30] audit: type=1400 audit(1793612863.482:569): avc: denied { watch } for pid=11983 comm="syz.7.1470" path="/25" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 824.913708][ T2267] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 825.073920][ T2267] usb 4-1: Using ep0 maxpacket: 32 [ 825.089568][ T2267] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 825.106088][ T2267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.106111][ T2267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.106133][ T2267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.107707][ T2267] usb 4-1: config 0 descriptor?? [ 825.613613][ T2267] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 825.813031][ T2267] usb 4-1: USB disconnect, device number 39 [ 826.363702][ T30] audit: type=1326 audit(1793612866.932:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.1476" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4b59f559 code=0x7ffc0000 [ 826.363737][ T30] audit: type=1326 audit(1793612866.932:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.1476" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4b59f559 code=0x7ffc0000 [ 826.365805][ T30] audit: type=1326 audit(1793612866.932:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.1476" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4b59f559 code=0x7ffc0000 [ 826.365837][ T30] audit: type=1326 audit(1793612866.932:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.1476" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7efe4b59f559 code=0x7ffc0000 [ 826.365862][ T30] audit: type=1326 audit(1793612866.932:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.1476" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4b59f559 code=0x7ffc0000 [ 826.365887][ T30] audit: type=1326 audit(1793612866.932:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.1476" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4b59f559 code=0x7ffc0000 [ 826.366593][ T30] audit: type=1326 audit(1793612866.932:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.1476" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe4b59f559 code=0x7ffc0000 [ 826.366626][ T30] audit: type=1326 audit(1793612866.932:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.1476" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efe4b59f559 code=0x7ffc0000 [ 826.366651][ T30] audit: type=1326 audit(1793612866.932:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12001 comm="syz.7.1476" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efe4b59f559 code=0x7ffc0000 [ 829.320659][T12021] netlink: 3528 bytes leftover after parsing attributes in process `syz.3.1483'. [ 829.362494][T11818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.558160][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 829.558174][ T30] audit: type=1400 audit(1793612870.122:580): avc: denied { getopt } for pid=12029 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 829.650459][T12033] tipc: Enabling of bearer rejected, failed to enable media [ 829.905057][T12045] device-mapper: ioctl: Invalid data size in the ioctl structure: 4294966852 [ 830.098785][T11818] veth0_vlan: entered promiscuous mode [ 830.139510][T11818] veth1_vlan: entered promiscuous mode [ 830.230816][T11818] veth0_macvtap: entered promiscuous mode [ 830.255165][T11818] veth1_macvtap: entered promiscuous mode [ 830.313616][T11818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.339998][T11818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.371323][ T6261] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.373132][ T6261] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.373159][ T6261] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.373179][ T6261] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.526564][T12053] FAULT_INJECTION: forcing a failure. [ 830.526564][T12053] name failslab, interval 1, probability 5, space 0, times 9989 [ 830.526598][T12053] CPU: 0 UID: 60928 PID: 12053 Comm: syz.6.1495 Not tainted syzkaller #0 PREEMPT(full) [ 830.526615][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 830.526624][T12053] Call Trace: [ 830.526629][T12053] [ 830.526635][T12053] dump_stack_lvl+0x100/0x190 [ 830.526663][T12053] should_fail_ex.cold+0x5/0xa [ 830.526686][T12053] should_failslab+0xc2/0x120 [ 830.526702][T12053] __kmalloc_cache_noprof+0x91/0x6d0 [ 830.526719][T12053] ? x509_key_preparse+0x355/0x9c0 [ 830.526743][T12053] x509_key_preparse+0x355/0x9c0 [ 830.526766][T12053] asymmetric_key_preparse+0xce/0x1d0 [ 830.526783][T12053] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 830.526801][T12053] __key_create_or_update+0x3f6/0xe10 [ 830.526825][T12053] ? __pfx___key_create_or_update+0x10/0x10 [ 830.526845][T12053] ? lookup_user_key+0x58c/0x14f0 [ 830.526865][T12053] ? __pfx_lookup_user_key+0x10/0x10 [ 830.526898][T12053] key_create_or_update+0x42/0x60 [ 830.526920][T12053] __do_sys_add_key+0x2e8/0x460 [ 830.526936][T12053] ? __pfx___do_sys_add_key+0x10/0x10 [ 830.526958][T12053] do_syscall_64+0x123/0x790 [ 830.526974][T12053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.526988][T12053] RIP: 0033:0x7f72eb39f559 [ 830.527000][T12053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.527013][T12053] RSP: 002b:00007f72ec200028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 830.527028][T12053] RAX: ffffffffffffffda RBX: 00007f72eb625fa0 RCX: 00007f72eb39f559 [ 830.527037][T12053] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 830.527045][T12053] RBP: 00007f72eb436b50 R08: ffffffffffffffff R09: 0000000000000000 [ 830.527053][T12053] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 830.527061][T12053] R13: 00007f72eb626038 R14: 00007f72eb625fa0 R15: 00007ffc4c3446b8 [ 830.527079][T12053] [ 830.897777][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.897794][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.023215][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.023232][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.029778][ T30] audit: type=1400 audit(1793612871.592:581): avc: denied { read } for pid=12060 comm="syz.7.1499" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 831.087584][T12059] device-mapper: ioctl: only supply one of name or uuid, cmd(6) [ 834.648655][T12075] input: syz0 as /devices/virtual/input/input19 [ 834.860457][T12083] FAULT_INJECTION: forcing a failure. [ 834.860457][T12083] name failslab, interval 1, probability 5, space 0, times 9988 [ 834.860479][T12083] CPU: 0 UID: 60928 PID: 12083 Comm: syz.7.1507 Not tainted syzkaller #0 PREEMPT(full) [ 834.860494][T12083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 834.860503][T12083] Call Trace: [ 834.860508][T12083] [ 834.860514][T12083] dump_stack_lvl+0x100/0x190 [ 834.860544][T12083] should_fail_ex.cold+0x5/0xa [ 834.860565][T12083] should_failslab+0xc2/0x120 [ 834.860580][T12083] __kmalloc_cache_noprof+0x91/0x6d0 [ 834.860598][T12083] ? x509_key_preparse+0x355/0x9c0 [ 834.860621][T12083] x509_key_preparse+0x355/0x9c0 [ 834.860644][T12083] asymmetric_key_preparse+0xce/0x1d0 [ 834.860661][T12083] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 834.860679][T12083] __key_create_or_update+0x3f6/0xe10 [ 834.860703][T12083] ? __pfx___key_create_or_update+0x10/0x10 [ 834.860722][T12083] ? lookup_user_key+0x58c/0x14f0 [ 834.860742][T12083] ? __pfx_lookup_user_key+0x10/0x10 [ 834.860773][T12083] key_create_or_update+0x42/0x60 [ 834.860796][T12083] __do_sys_add_key+0x2e8/0x460 [ 834.860812][T12083] ? __pfx___do_sys_add_key+0x10/0x10 [ 834.860833][T12083] do_syscall_64+0x123/0x790 [ 834.860849][T12083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.860862][T12083] RIP: 0033:0x7efe4b59f559 [ 834.860880][T12083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.860895][T12083] RSP: 002b:00007efe4c471028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 834.860910][T12083] RAX: ffffffffffffffda RBX: 00007efe4b825fa0 RCX: 00007efe4b59f559 [ 834.860919][T12083] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 834.860928][T12083] RBP: 00007efe4b636b50 R08: ffffffffffffffff R09: 0000000000000000 [ 834.860937][T12083] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 834.860945][T12083] R13: 00007efe4b826038 R14: 00007efe4b825fa0 R15: 00007ffcb90709d8 [ 834.860964][T12083] [ 839.739671][ T30] audit: type=1400 audit(1793612880.302:582): avc: denied { bind } for pid=12111 comm="syz.8.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 839.739710][ T30] audit: type=1400 audit(1793612880.302:583): avc: denied { name_bind } for pid=12111 comm="syz.8.1516" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 839.739734][ T30] audit: type=1400 audit(1793612880.302:584): avc: denied { node_bind } for pid=12111 comm="syz.8.1516" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 842.002133][T11609] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 843.333200][T11609] usb 4-1: device descriptor read/all, error -71 [ 844.521419][ T30] audit: type=1400 audit(1793612885.092:585): avc: denied { create } for pid=12131 comm="syz.3.1524" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 845.495246][ T30] audit: type=1400 audit(1793612886.062:586): avc: denied { mounton } for pid=12131 comm="syz.3.1524" path="/329/file0" dev="tmpfs" ino=1841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 845.569738][T12135] rxe_eth0 speed is unknown, defaulting to 1000 [ 846.920432][ T30] audit: type=1400 audit(1793612887.482:587): avc: denied { module_load } for pid=12149 comm="syz.3.1529" path="/330/bus" dev="tmpfs" ino=1847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 847.043490][T11609] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 847.202258][T11609] usb 9-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 847.205035][T11609] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.205071][T11609] usb 9-1: Product: syz [ 847.205082][T11609] usb 9-1: Manufacturer: syz [ 847.205092][T11609] usb 9-1: SerialNumber: syz [ 847.465399][T12152] Invalid ELF header magic: != ELF [ 849.603268][ T30] audit: type=1400 audit(1793612890.172:588): avc: denied { map } for pid=12157 comm="syz.6.1532" path="socket:[35214]" dev="sockfs" ino=35214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 850.036351][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 850.158256][T11609] rtl8150 9-1:1.0: couldn't reset the device [ 850.158440][T11609] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 850.229659][T11609] usb 9-1: USB disconnect, device number 2 [ 850.297136][ T30] audit: type=1400 audit(1793612890.862:589): avc: denied { setopt } for pid=12163 comm="syz.8.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 851.653697][ T985] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 851.831280][ T985] usb 4-1: Using ep0 maxpacket: 16 [ 851.831782][ T985] usb 4-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 851.834099][ T985] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.834123][ T985] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.834137][ T985] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 851.834155][ T985] usb 4-1: config 0 interface 0 has no altsetting 0 [ 851.834174][ T985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.836295][ T985] usb 4-1: config 0 descriptor?? [ 852.172380][ T2267] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 852.182309][ T5860] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 852.217725][ T30] audit: type=1326 audit(1793612892.782:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12174 comm="syz.2.1539" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82379f559 code=0x7fc00000 [ 957.280996][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 957.287996][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12175/1:b..l.. [ 957.297270][ C0] rcu: (detected by 0, t=10502 jiffies, g=91745, q=577 ncpus=1) [ 957.305087][ C0] task:syz.2.1539 state:R running task stack:22248 pid:12175 tgid:12174 ppid:5629 task_flags:0x40044c flags:0x00080001 [ 957.318542][ C0] Call Trace: [ 957.321807][ C0] [ 957.324725][ C0] __schedule+0x125e/0x6990 [ 957.329230][ C0] ? __pfx___schedule+0x10/0x10 [ 957.334071][ C0] ? mark_held_locks+0x40/0x70 [ 957.338838][ C0] preempt_schedule_irq+0x4e/0x90 [ 957.343853][ C0] irqentry_exit+0x33f/0xab0 [ 957.348428][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 957.354412][ C0] RIP: 0010:preempt_schedule+0x5f/0xd0 [ 957.359873][ C0] Code: c1 eb 03 48 01 c3 65 48 ff 05 55 4d cb 09 65 83 3d 4d 4d cb 09 01 74 28 bf 01 00 00 00 e8 69 91 ff ff 65 48 ff 0d 39 4d cb 09 <80> 3b 00 75 53 48 8b 45 00 a8 10 75 cf 5b 5d 41 5c e9 db 05 02 00 [ 957.379553][ C0] RSP: 0018:ffffc90003eff498 EFLAGS: 00000246 [ 957.385609][ C0] RAX: 0000000000000000 RBX: ffffed1008593000 RCX: 1ffff920007dfe80 [ 957.393577][ C0] RDX: 0000000000000000 RSI: ffffffff8c835300 RDI: ffffffff8e8f7920 [ 957.401535][ C0] RBP: ffff888042c98000 R08: 0000000000000000 R09: fffffbfff24d530b [ 957.409595][ C0] R10: ffffffff926a985f R11: 0000000000000000 R12: ffffffff8177ce46 [ 957.417639][ C0] R13: fffffbfff24d590c R14: dffffc0000000000 R15: 0000000000000000 [ 957.425617][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 957.430989][ C0] ? preempt_schedule+0x57/0xd0 [ 957.435830][ C0] preempt_schedule_thunk+0x16/0x40 [ 957.441022][ C0] _raw_spin_unlock+0x3e/0x50 [ 957.445700][ C0] __zap_vma_range+0x16b0/0x4980 [ 957.450638][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 957.456011][ C0] ? mas_next_slot+0xc05/0x13a0 [ 957.460853][ C0] unmap_vmas+0x294/0x5f0 [ 957.465173][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 957.470014][ C0] ? mas_next_slot+0xc05/0x13a0 [ 957.474883][ C0] exit_mmap+0x1ef/0xa40 [ 957.479110][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 957.483857][ C0] ? rcu_is_watching+0x13/0xc0 [ 957.488611][ C0] ? find_held_lock+0x2b/0x80 [ 957.493270][ C0] ? uprobe_clear_state+0x5f/0x250 [ 957.498383][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 957.504021][ C0] __mmput+0x12a/0x410 [ 957.508149][ C0] mmput+0x62/0x70 [ 957.511888][ C0] do_exit+0x80c/0x2a00 [ 957.516043][ C0] ? __pfx___might_resched+0x10/0x10 [ 957.521332][ C0] ? __pfx_do_exit+0x10/0x10 [ 957.525910][ C0] ? do_raw_spin_lock+0x128/0x260 [ 957.530918][ C0] ? find_held_lock+0x2b/0x80 [ 957.535575][ C0] ? get_signal+0xa28/0x22e0 [ 957.540152][ C0] do_group_exit+0xd5/0x2a0 [ 957.544643][ C0] get_signal+0x1f58/0x22e0 [ 957.549156][ C0] ? kick_process+0xf0/0x1a0 [ 957.553738][ C0] ? __pfx_get_signal+0x10/0x10 [ 957.558625][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 957.564208][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 957.570385][ C0] ? fput+0xdc/0x100 [ 957.574284][ C0] exit_to_user_mode_loop+0x139/0x700 [ 957.579638][ C0] ? rcu_is_watching+0x13/0xc0 [ 957.584389][ C0] do_syscall_64+0x661/0x790 [ 957.588972][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.594880][ C0] RIP: 0033:0x7fd82379f559 [ 957.599289][ C0] RSP: 002b:00007fd82460b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 957.607771][ C0] RAX: fffffffffffffffc RBX: 00007fd823a25fa0 RCX: 00007fd82379f559 [ 957.615745][ C0] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 957.623699][ C0] RBP: 00007fd823836b50 R08: 0000000000000000 R09: 0000000000000000 [ 957.631655][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 957.639616][ C0] R13: 00007fd823a26038 R14: 00007fd823a25fa0 R15: 00007fffd317ec48 [ 957.647616][ C0] [ 957.650682][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g91745 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 957.661680][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 957.671628][ C0] rcu: RCU grace-period kthread stack dump: [ 957.677500][ C0] task:rcu_preempt state:R running task stack:27560 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 957.690960][ C0] Call Trace: [ 957.694247][ C0] [ 957.697181][ C0] __schedule+0x125e/0x6990 [ 957.701674][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 957.706619][ C0] ? __pfx___schedule+0x10/0x10 [ 957.711485][ C0] ? find_held_lock+0x2b/0x80 [ 957.716164][ C0] ? schedule+0x225/0x2c0 [ 957.720502][ C0] schedule+0xdd/0x2c0 [ 957.724563][ C0] schedule_timeout+0x127/0x280 [ 957.729401][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 957.734757][ C0] ? __pfx_process_timeout+0x10/0x10 [ 957.740048][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 957.745845][ C0] ? prepare_to_swait_event+0xdf/0x4f0 [ 957.751298][ C0] rcu_gp_fqs_loop+0x1a9/0x930 [ 957.756069][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 957.761354][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 957.766296][ C0] ? rcu_is_watching+0x13/0xc0 [ 957.771046][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 957.776844][ C0] rcu_gp_kthread+0x179/0x260 [ 957.781507][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 957.786689][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 957.792486][ C0] ? __kthread_parkme+0x18f/0x230 [ 957.797502][ C0] ? kthread+0x13a/0x450 [ 957.801745][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 957.806934][ C0] kthread+0x373/0x450 [ 957.810989][ C0] ? __pfx_kthread+0x10/0x10 [ 957.815582][ C0] ret_from_fork+0x730/0xd60 [ 957.820161][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 957.825258][ C0] ? __switch_to+0x800/0x10e0 [ 957.829914][ C0] ? __pfx_kthread+0x10/0x10 [ 957.834485][ C0] ret_from_fork_asm+0x1a/0x30 [ 957.839329][ C0] [ 957.842333][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 957.848644][ C0] CPU: 0 UID: 0 PID: 12184 Comm: syz.7.1541 Not tainted syzkaller #0 PREEMPT(full) [ 957.857995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 957.868037][ C0] RIP: 0010:lock_acquire+0x5e/0x380 [ 957.873226][ C0] Code: 05 0f 01 d1 13 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 1e 69 81 10 0f 82 c9 02 00 00 8b 35 fe 98 81 10 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ad 00 d1 13 0f 85 09 03 00 00 48 83 c4 [ 957.892819][ C0] RSP: 0018:ffffc90004707be0 EFLAGS: 00000206 [ 957.898872][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 957.906825][ C0] RDX: 0000000000000000 RSI: ffffffff8e601094 RDI: ffffffff8c835380 [ 957.914802][ C0] RBP: ffff88807dda4080 R08: 0000000000046554 R09: 00000000000001d7 [ 957.922757][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000001 [ 957.930726][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 957.938866][ C0] FS: 00007efe4c4716c0(0000) GS:ffff88812247d000(0000) knlGS:0000000000000000 [ 957.947810][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.954386][ C0] CR2: 0000001b31112ff8 CR3: 000000007540c000 CR4: 00000000003526f0 [ 957.962350][ C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 957.970322][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 957.978282][ C0] Call Trace: [ 957.981547][ C0] [ 957.984466][ C0] ? __pfx___might_resched+0x10/0x10 [ 957.989743][ C0] ? __might_fault+0xc5/0x140 [ 957.994425][ C0] __might_fault+0xde/0x140 [ 957.998932][ C0] ? __might_fault+0xc5/0x140 [ 958.003615][ C0] _copy_to_user+0x2d/0xd0 [ 958.008042][ C0] copy_siginfo_to_user+0x27/0xc0 [ 958.013060][ C0] x64_setup_rt_frame+0xa03/0xce0 [ 958.018098][ C0] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 958.023637][ C0] arch_do_signal_or_restart+0x5ee/0x7e0 [ 958.029344][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 958.035490][ C0] ? __pfx_restore_altstack+0x10/0x10 [ 958.040864][ C0] exit_to_user_mode_loop+0x139/0x700 [ 958.046244][ C0] ? rcu_is_watching+0x13/0xc0 [ 958.050998][ C0] do_syscall_64+0x661/0x790 [ 958.055577][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.061456][ C0] RIP: 0033:0x7efe4b59f557 [ 958.065857][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 958.085991][ C0] RSP: 002b:00007efe4c4710e8 EFLAGS: 00000246 [ 958.092048][ C0] RAX: 00000000000000ca RBX: 00007efe4b825fa8 RCX: 00007efe4b59f559 [ 958.100002][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efe4b825fa8 [ 958.107954][ C0] RBP: 00007efe4b825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 958.115930][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.123887][ C0] R13: 00007efe4b826038 R14: 00007ffcb90708f0 R15: 00007ffcb90709d8 [ 958.131877][ C0] [ 958.173136][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 958.173172][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 958.174087][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 958.174114][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 959.053953][ T985] usbhid 4-1:0.0: can't add hid device: -32 [ 959.054025][ T985] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 961.032889][T10666] Bluetooth: hci0: command 0x0406 tx timeout [ 961.032925][T10666] Bluetooth: hci5: command 0x0406 tx timeout [ 962.042941][ T5860] usb 9-1: New USB device found: idVendor=0810, idProduct=0002, bcdDevice=0.00 [ 963.544170][ T5860] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 963.544211][ T5860] usb 9-1: config 0 interface 0 has no altsetting 0 [ 963.544232][ T5860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.546013][ T5860] usb 9-1: config 0 descriptor?? [ 964.724501][ T5946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.724529][ T5946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 964.938597][ T5946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.938624][ T5946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 964.978473][ T2267] usb 7-1: device descriptor read/all, error -71 [ 965.005478][ T985] usb 4-1: USB disconnect, device number 42 [ 965.029808][ T5860] usbhid 9-1:0.0: can't add hid device: -71 [ 965.029877][ T5860] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 965.183313][ T5860] usb 9-1: USB disconnect, device number 3 [ 965.220358][ T5946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.220383][ T5946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 965.342723][ T5946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.342747][ T5946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 965.537435][ T5946] bridge_slave_1: left allmulticast mode [ 965.537456][ T5946] bridge_slave_1: left promiscuous mode [ 965.537584][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.542880][ T5946] bridge_slave_0: left allmulticast mode [ 965.542918][ T5946] bridge_slave_0: left promiscuous mode [ 965.543055][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.968902][ T30] audit: type=1400 audit(1793613006.532:591): avc: denied { write } for pid=12208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 966.001772][ T5946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.004905][ T5946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.005779][ T5946] bond0 (unregistering): Released all slaves [ 966.049858][ T5946] bond1 (unregistering): (slave veth5): Releasing backup interface [ 966.060674][ T5946] bond1 (unregistering): Released all slaves [ 966.208902][ T30] audit: type=1400 audit(1793613006.772:592): avc: denied { write } for pid=12219 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 966.362107][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13 [ 966.699540][ T5946] hsr_slave_0: left promiscuous mode [ 966.699910][ T5946] hsr_slave_1: left promiscuous mode [ 966.700333][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.700345][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.734365][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.735358][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.756314][ T5946] batadv_slave_1: left promiscuous mode [ 966.756382][ T5946] veth1_macvtap: left promiscuous mode [ 966.756399][ T5946] veth0_macvtap: left promiscuous mode [ 966.756463][ T5946] veth1_vlan: left promiscuous mode [ 966.756513][ T5946] veth0_vlan: left promiscuous mode [ 967.035207][ T30] audit: type=1400 audit(1793613007.602:593): avc: denied { write } for pid=12222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 967.190106][ T30] audit: type=1400 audit(1793613007.752:594): avc: denied { write } for pid=12233 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1